CVE-2026-68135: net: hip04: fix RX buffer leak on build_skb failure
In the Linux kernel, the following vulnerability has been resolved:
net: hip04: fix RX buffer leak on buildskb failure
When buildskb() fails in hip04rxpoll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources.
Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dmamapsingle() fails.
This issue was found by an in-house static analysis tool.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68135?
CVE-2026-68135 has a risk level rated at 12.
How do I fix CVE-2026-68135?
To fix CVE-2026-68135, ensure that you update to the latest patched version of the Linux kernel that addresses this vulnerability.
What is the impact of CVE-2026-68135?
The impact of CVE-2026-68135 includes potential memory leaks due to unreleased RX buffers and their DMA mappings.
Who is affected by CVE-2026-68135?
CVE-2026-68135 affects systems running specific versions of the Linux kernel that utilize the hip04 network driver.
Is CVE-2026-68135 being actively exploited?
As of now, there are no known active exploits targeting CVE-2026-68135.