{"apiVersion":"1.0","identifier":"CVE-2026-74678","description":"In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() When the interface has NETIF_F_SG enabled and skb_linearize() fails in ax88179_tx_fixup(), the function returns NULL without freeing the skb. usbnet_start_xmit() treats a NULL return from tx_fixup() as a drop (info->flags does not set FLAG_MULTI_PACKET for this driver), jumping to the -drop- label where it does `if (skb) dev_kfree_skb_any(skb)`. Because tx_fixup() returned NULL, the local skb variable in usbnet_start_xmit() is NULL, so the original skb is never freed — a memory leak on every TX frame whose linearization fails (i.e. under memory pressure). Free the skb before returning, matching the error handling already used for the pskb_expand_head() failure path in the same function.","publishedAt":"2026-08-22T16:16:41","lastModifiedAt":"2026-08-25T06:18:50","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74678","cvssScore":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","epssProbability":0.00479,"riskScore":0.78,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-74678","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-74678","en":"https://www.redsauce.net/en/cves/CVE-2026-74678","fr":"https://www.redsauce.net/fr/cves/CVE-2026-74678","pt":"https://www.redsauce.net/pt/cves/CVE-2026-74678","de":"https://www.redsauce.net/de/cves/CVE-2026-74678","sk":"https://www.redsauce.net/sk/cves/CVE-2026-74678","el":"https://www.redsauce.net/el/cves/CVE-2026-74678"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-74678"}}