CVE-2026-43031: net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets

Published May 1, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets

When a TX packet spans multiple buffer descriptors (scatter-gather), axienetfreetxchain sums the per-BD actual length from descriptor status into a caller-provided accumulator. That sum is reset on each NAPI poll. If the BDs for a single packet complete across different polls, the earlier bytes are lost and never credited to BQL. This causes BQL to think bytes are permanently in-flight, eventually stalling the TX queue.

The SKB pointer is stored only on the last BD of a packet. When that BD completes, use skb->len for the byte count instead of summing per-BD status lengths. This matches netdevsentqueue(), which debits skb->len, and naturally survives across polls because no partial packet contributes to the accumulator.

Affected Software

9 affected components
The Linux Foundation Linux kernel (xilinx axienet driver)
Linux Linux kernel>=6.15<6.18.22
Linux Linux kernel>=6.19<6.19.12
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Linux Linux kernel=7.0-rc3
Linux Linux kernel=7.0-rc4
Linux Linux kernel=7.0-rc5
Linux Linux kernel=7.0-rc6

Event History

May 1, 2026
CVE Published
via MITRE·02:15 PM
Data Sourced
via MITRE·02:15 PM
DescriptionSeverity
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-43031?

CVE-2026-43031 has a medium severity level due to its potential impact on packet transmission integrity.

2

How do I fix CVE-2026-43031?

To fix CVE-2026-43031, update to the Linux kernel version that includes the patch for the axienet driver.

3

What does CVE-2026-43031 affect?

CVE-2026-43031 affects the Linux kernel specifically related to the Xilinx axienet driver.

4

What types of attacks could exploit CVE-2026-43031?

CVE-2026-43031 could be exploited to disrupt proper transmission of network packets in certain conditions.

5

Is CVE-2026-43031 specific to certain versions of the Linux kernel?

Yes, CVE-2026-43031 is specific to versions of the Linux kernel that utilize the Xilinx axienet driver.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203