CVE-2026-64110: igc: fix potential skb leak in igc_fpe_xmit_smd_frame()
In the Linux kernel, the following vulnerability has been resolved:
igc: fix potential skb leak in igcfpexmitsmdframe()
When igcfpeinittxdescriptor() fails, no one takes care of an allocated skb, leaking it. [1] Use devkfreeskbany() on failure.
Tested on an I226 adapter with the following command, while injecting faults in igcfpeinittxdescriptor() to trigger the error path. # ethtool --set-mm $DEV verify-enabled on tx-enabled on pmac-enabled on
[1] unreferenced object 0xffff888113c6cdc0 (size 224): ... backtrace (crc be3d3fda): kmemcacheallocnodenoprof+0x3b1/0x410 allocskb+0xde/0x830 igcfpexmitsmdframe.isra.0+0xad/0x1b0 igcfpesendmpacket+0x37/0x90 ethtoolmmsvverifytimer+0x15e/0x300
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64110?
The severity of CVE-2026-64110 is rated at 9, indicating a high level of risk.
What systems are affected by CVE-2026-64110?
CVE-2026-64110 affects the Linux kernel when using the igc driver.
How do I fix CVE-2026-64110?
To fix CVE-2026-64110, update to the latest version of the Linux kernel which includes the fix.
What are the consequences of CVE-2026-64110?
CVE-2026-64110 can lead to memory leaks if skb is not properly handled on initialization failure.
When was CVE-2026-64110 published?
CVE-2026-64110 was published on July 19, 2026.