Strix
26.1K

CVE-2026-68135

Unknown

Last modified

CVE-2026-68135 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources. Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails. This issue was found by an in-house static analysis tool..

Description

In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources. Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails. This issue was found by an in-house static analysis tool.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 701a0fd5231866db08cebcd502894699f49cb960, < e054dcd990d8180cde529ea28ce0838e76a5ad5e; >= 701a0fd5231866db08cebcd502894699f49cb960, < 67a7614bde310da006ab259f4f163d3fb0f9e253; >= 701a0fd5231866db08cebcd502894699f49cb960, < 80d977f280b4eccd4ac5369871d0ecb2b9c9a49d; >= 701a0fd5231866db08cebcd502894699f49cb960, < a0f247d63489a107bbc3b712a77b302af2a2a173; >= 701a0fd5231866db08cebcd502894699f49cb960, < 14fa65d10f5696b063a7d8d26e8291ea84a2c6ed
LinuxLinux4.5

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-68135?
In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources. Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails. This issue was found by an in-house static analysis tool.
How severe is CVE-2026-68135?
Severity scoring for CVE-2026-68135 is pending analysis.
How do I fix CVE-2026-68135?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-68135?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST