Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the buf_state and its attached buffer should be freed. In the case of AF_XDP ZC, the XSK buffer was not freed, leading to a leak. This issue was caught by LLM.
CVSS Score
HIGH
References
- https://git.kernel.org/stable/c/06656aaa7e43ae62b673c2244d27099b8b94a70d
- https://git.kernel.org/stable/c/889f763874855c575429f75946132a53c573aa14
- https://git.kernel.org/stable/c/9fed6a8ab8a5bacba2c709cb19d2dd6d2fa9112e
FAQ
What is CVE-2026-99046?
CVE-2026-99046 is a vulnerability with a CVSS score of 7.5 (HIGH). In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the buf_state and its atta...
How severe is CVE-2026-99046?
CVE-2026-99046 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-99046?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.