CVE-2026-43102: net: airoha: Fix memory leak in airoha_qdma_rx_process()
In the Linux kernel, the following vulnerability has been resolved:
net: airoha: Fix memory leak in airohaqdmarxprocess()
If an error occurs on the subsequents buffers belonging to the non-linear part of the skb (e.g. due to an error in the payload length reported by the NIC or if we consumed all the available fragments for the skb), the pagepool fragment will not be linked to the skb so it will not return to the pool in the airohaqdmarxprocess() error path. Fix the memory leak partially reverting commit 'd6d2b0e1538d ("net: airoha: Fix page recycling in airohaqdmarxprocess()")' and always running pagepoolputfullpage routine in the airohaqdmarxprocess() error path.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-nvidiato a version that resolves this vulnerability.Fixed in 7.0.0-1006.6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.14-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43102?
CVE-2026-43102 is categorized with a medium severity due to the potential memory leak vulnerability in the Linux kernel.
How do I fix CVE-2026-43102?
To fix CVE-2026-43102, ensure your Linux kernel is updated to the latest patched version that addresses the memory leak issue.
What systems are affected by CVE-2026-43102?
CVE-2026-43102 affects systems running the Linux kernel with vulnerable versions of the airoha driver.
What is the impact of CVE-2026-43102?
The impact of CVE-2026-43102 includes potential memory exhaustion leading to degraded system performance or crashes.
Who reported CVE-2026-43102?
CVE-2026-43102 was reported and acknowledged by the Linux kernel development community.