CVE-2026-98492
Linux: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in259e6cbb6a097da8ced544ee92a6fbde35aa1338Also 23d42b9a3bcd55b17d3b371544fedc708c2397e9, 6.18CVE List
What fixes it
- 259e6cbb6a097da8ced544ee92a6fbde35aa1338LinuxCVE List
- 23d42b9a3bcd55b17d3b371544fedc708c2397e9LinuxCVE List
- 6.18LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths
Fix 3 leaks in macb_alloc() error paths:
- Tx buffer allocated but crossing a 4G boundary: Tx leaked.
- Rx buffer allocation fails: Tx leaked.
- Rx buffer allocated but crossing a 4G boundary: Tx & Rx leaked.
This is because our error handling calls macb_free(bp) which in turn frees the buffers stored in bp->queues[0], but nothing has been stored in there. Fix by storing allocated buffers into bp->queues[0] ASAP.
Text from CVE List
Affected versions 10
- Linuxaffected: 78d901897b3cae06b38f54e48a2378cf9da21175 before bda487567d0b7b15dfa876511085c0666b9efad5CVE List
- Linuxaffected: 78d901897b3cae06b38f54e48a2378cf9da21175 before 259e6cbb6a097da8ced544ee92a6fbde35aa1338CVE List
- Linuxaffected: 78d901897b3cae06b38f54e48a2378cf9da21175 before 23d42b9a3bcd55b17d3b371544fedc708c2397e9CVE List
- Linuxaffected: 982a4d9a2e12b693f684eff943043a607628d871CVE List
- Linuxaffected: 6.17.3 before 6.18CVE List
- Linuxaffected: 6.18CVE List
- Linuxunaffected: all versions before 6.18CVE List
- Linuxunaffected: 6.18.55 through 6.18.*CVE List
- Linuxunaffected: 7.2.9 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List