CVE-2026-74525: net: sxgbe: free TX rings on RX allocation failure
In the Linux kernel, the following vulnerability has been resolved:
net: sxgbe: free TX rings on RX allocation failure
When RX descriptor ring allocation fails, initdmadescrings() only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function are leaked.
Rearrange error labels to clean up TX rings upon RX failures.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.152.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74525?
CVE-2026-74525 has a severity rating of 10, indicating critical risk.
How do I fix CVE-2026-74525?
To fix CVE-2026-74525, you should update your Linux kernel to the latest version that addresses this vulnerability.
What is the impact of CVE-2026-74525?
The impact of CVE-2026-74525 includes potential denial of service due to improper handling of TX rings during RX allocation failures.
Which versions of the Linux kernel are affected by CVE-2026-74525?
CVE-2026-74525 affects specific versions of the Linux kernel where the vulnerability was introduced.
What components are involved in CVE-2026-74525?
CVE-2026-74525 involves the net subsystem of the Linux kernel, particularly the sxgbe driver.