CVE-2026-99047
gve: fix XSK buffer leak when rings are stopped
Fetching some sources has been requested. Reload in about a minute to see them.
CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
—
Not scored
EPSS exploit probability
0.2%
Percentile 10.2%
as of 2026-10-24
CISA KEV
—
Not listed
Description
NVD
In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached to an allocated buf_state when stopping rings. This issue was hit in production.
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | affected: c1fffc5d66a7147d557736c2341a511e0896d9ff … < 506f9de069d07a72b9887ce3edd2fdf32f4953aa affected: c1fffc5d66a7147d557736c2341a511e0896d9ff … < 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7 affected: c1fffc5d66a7147d557736c2341a511e0896d9ff … < 73670ddb91a4d22e1deb3efd962242de1ec48e90 default: unaffected |
| Linux | Linux | affected: 6.17 unaffected: 0 … < 6.17 unaffected: 6.18.57 … <= 6.18.* unaffected: 7.2.11 … <= 7.2.* unaffected: 7.3 … <= * default: affected |
Open-source packages (GitHub Advisory / OSV)
CVE-2026-99047
OSV
gve: fix XSK buffer leak when rings are stopped
| Ecosystem | Package | Affected versions | Fixed in |
|---|---|---|---|
| >= c1fffc5d66a7147d557736c2341a511e0896d9ff, < 506f9de069d07a72b9887ce3edd2fdf32f4953aa; < 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7; < 73670ddb91a4d22e1deb3efd962242de1ec48e90 | 506f9de069d07a72b9887ce3edd2fdf32f4953aa, 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7, 73670ddb91a4d22e1deb3efd962242de1ec48e90 | ||
| Linux | Kernel | >= 6.17.0, < 6.18.57; >= 6.19.0, < 7.2.11 | 6.18.57, 7.2.11 |
Linux distribution status
References (6)
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git OSV
- https://git.kernel.org/stable/c/506f9de069d07a72b9887ce3edd2fdf32f4953aa NVD, CNA, OSV
- https://git.kernel.org/stable/c/73670ddb91a4d22e1deb3efd962242de1ec48e90 NVD, CNA, OSV
- https://git.kernel.org/stable/c/7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7 NVD, CNA, OSV
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99047.json OSV
- https://nvd.nist.gov/vuln/detail/CVE-2026-99047 OSV