Strix
73K

CVE-2026-99045

UnknownEPSS 0.18%

Last modified

CVE-2026-99045 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: ibmveth: h_free logical LAN on open-fail after register ibmveth_open() registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to out_free_buffer_pools without h_free_logical_lan(), so PHYP still owns the buffer-list page when it is unmapped. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: ibmveth: h_free logical LAN on open-fail after register ibmveth_open() registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to out_free_buffer_pools without h_free_logical_lan(), so PHYP still owns the buffer-list page when it is unmapped. request_irq() failure already issued the hypercall before taking the same label. Move that h_free to the shared post-register unwind so both paths deregister before the buffer list is unmapped.

Metrics

EPSS Probability
0.18%

7.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d43732ce021f4244a4c53a45d57ad0c13c30ed94, < 073df7871a7023298ce27cfa518fbc30cc155651; >= d43732ce021f4244a4c53a45d57ad0c13c30ed94, < 7bd67d324d952101b3431c796d79f5e329bba159; >= d43732ce021f4244a4c53a45d57ad0c13c30ed94, < eae138e880686ce19879aa0d158fa3c73516f632; >= d43732ce021f4244a4c53a45d57ad0c13c30ed94, < decb4d4ead2c71ef698727734ab5024a872eb372; >= d43732ce021f4244a4c53a45d57ad0c13c30ed94, < c54bbdf6f0731102a4bf7f5e4ee535b3ea415996; >= d43732ce021f4244a4c53a45d57ad0c13c30ed94, < a065bd31ec462f6f9c267026b708dd020f122723; >= d43732ce021f4244a4c53a45d57ad0c13c30ed94, < d24fdec1413c656d29298097926e77542785ca0c; >= d43732ce021f4244a4c53a45d57ad0c13c30ed94, < af0524bf4ce1a4cbd2946aa81751582951cfcab5
LinuxLinux4.13

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-99045?
In the Linux kernel, the following vulnerability has been resolved: ibmveth: h_free logical LAN on open-fail after register ibmveth_open() registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to out_free_buffer_pools without h_free_logical_lan(), so PHYP still owns the buffer-list page when it is unmapped. request_irq() failure already issued the hypercall before taking the same label. Move that h_free to the shared post-register unwind so both paths deregister before the buffer list is unmapped.
How severe is CVE-2026-99045?
Severity scoring for CVE-2026-99045 is pending analysis. The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2026-99045?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-99045?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST