All vulnerabilities
CVE-2026-99047

Linux: gve: fix XSK buffer leak when rings are stopped

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in506f9de069d07a72b9887ce3edd2fdf32f4953aaAlso 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7, 73670ddb91a4d22e1deb3efd962242de1ec48e90CVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

  • 506f9de069d07a72b9887ce3edd2fdf32f4953aaLinuxCVE List
  • 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7LinuxCVE List
  • 73670ddb91a4d22e1deb3efd962242de1ec48e90LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

gve: fix XSK buffer leak when rings are stopped

GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked.

Free XSK buffers attached to an allocated buf_state when stopping rings.

This issue was hit in production.

Text from CVE List

Affected versions 8

  • Linuxaffected: c1fffc5d66a7147d557736c2341a511e0896d9ff before 506f9de069d07a72b9887ce3edd2fdf32f4953aaCVE List
  • Linuxaffected: c1fffc5d66a7147d557736c2341a511e0896d9ff before 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7CVE List
  • Linuxaffected: c1fffc5d66a7147d557736c2341a511e0896d9ff before 73670ddb91a4d22e1deb3efd962242de1ec48e90CVE List
  • Linuxaffected: 6.17CVE List
  • Linuxunaffected: all versions before 6.17CVE List
  • Linuxunaffected: 6.18.57 through 6.18.*CVE List
  • Linuxunaffected: 7.2.11 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3