Descripción
In the Linux kernel, the following vulnerability has been resolved: net: macb: drop in-flight Tx SKBs on close The MACB driver has since forever leaked the outgoing SKBs that have not yet been marked as completed. They live in queue->tx_skb which gets freed without remorse nor checking. macb_free_consistent() gets called in a few codepaths, but only close will trigger the added expressions. In macb_open() and macb_alloc_consistent() failure cases, queues- tx_skb just got allocated and are empty.
EPSS 0.20600000000000002%Riesgo 0
Ver fuente- Publicación
- 2026-08-15 06:21:00
- Versiones afectadas
- unknown
- Tipo
- Kernel
- Última modificación
- 2026-08-23 13:16:37
- Vector
- Pending