CVE-2026-98492

medium

Description

In the Linux kernel, the following vulnerability has been resolved: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths Fix 3 leaks in macb_alloc() error paths: - Tx buffer allocated but crossing a 4G boundary: Tx leaked. - Rx buffer allocation fails: Tx leaked. - Rx buffer allocated but crossing a 4G boundary: Tx & Rx leaked. This is because our error handling calls macb_free(bp) which in turn frees the buffers stored in bp->queues[0], but nothing has been stored in there. Fix by storing allocated buffers into bp->queues[0] ASAP.

References

https://git.kernel.org/stable/c/bda487567d0b7b15dfa876511085c0666b9efad5

https://git.kernel.org/stable/c/259e6cbb6a097da8ced544ee92a6fbde35aa1338

https://git.kernel.org/stable/c/23d42b9a3bcd55b17d3b371544fedc708c2397e9

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-103732

Details

Source: Mitre, NVD

Published: 2026-10-18

Updated: 2026-10-19

Risk Information

CVSS v2

Base Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00198