CVE-2026-74525

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init_dma_desc_rings() only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function are leaked. Rearrange error labels to clean up TX rings upon RX failures.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/3563e2486dcd50a751dbcbc1de37e5186646dce6
https://git.kernel.org/stable/c/42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb
https://git.kernel.org/stable/c/923389d0370b4117bd579784442e8450f9bb89be
https://git.kernel.org/stable/c/a07a69f472fff1c6edf77ca97616381657a8444c
https://git.kernel.org/stable/c/b33644a4f6d8f127c62d7b39f24114d3d2499204
https://git.kernel.org/stable/c/c870f7e2890b9f78ac84515a9809cc5c183c975e
https://git.kernel.org/stable/c/f2e5bb9fb710553e76a3be9097b448b4e73d8c92
https://git.kernel.org/stable/c/f52de3ea462229457334c9d3c0d95a7856908664

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 13:17

Updated : 2026-08-19 17:21

NVD link : CVE-2026-74525

Mitre link : CVE-2026-74525

CVE.ORG link : CVE-2026-74525

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-74525", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "923389d0370b4117bd579784442e8450f9bb89be", "versionType": "git"}, {"status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "a07a69f472fff1c6edf77ca97616381657a8444c", "versionType": "git"}, {"status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "f52de3ea462229457334c9d3c0d95a7856908664", "versionType": "git"}, {"status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "3563e2486dcd50a751dbcbc1de37e5186646dce6", "versionType": "git"}, {"status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "b33644a4f6d8f127c62d7b39f24114d3d2499204", "versionType": "git"}, {"status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb", "versionType": "git"}, {"status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "f2e5bb9fb710553e76a3be9097b448b4e73d8c92", "versionType": "git"}, {"status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "c870f7e2890b9f78ac84515a9809cc5c183c975e", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.15"}, {"status": "unaffected", "version": "0", "lessThan": "3.15", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.265", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.216", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.183", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.151", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.103", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.44", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.8", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T13:17:57.763", "references": [{"url": "https://git.kernel.org/stable/c/3563e2486dcd50a751dbcbc1de37e5186646dce6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/923389d0370b4117bd579784442e8450f9bb89be", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a07a69f472fff1c6edf77ca97616381657a8444c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b33644a4f6d8f127c62d7b39f24114d3d2499204", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c870f7e2890b9f78ac84515a9809cc5c183c975e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f2e5bb9fb710553e76a3be9097b448b4e73d8c92", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f52de3ea462229457334c9d3c0d95a7856908664", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sxgbe: free TX rings on RX allocation failure\n\nWhen RX descriptor ring allocation fails, init_dma_desc_rings() only\nfrees the partially allocated RX rings and returns. The TX rings that\nwere allocated earlier in the same function are leaked.\n\nRearrange error labels to clean up TX rings upon RX failures."}], "lastModified": "2026-08-19T17:21:09.177", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}