CVE-2026-31645

MEDIUM EPSS 2.3%
Published Apr 24, 20262mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Apr 24, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page pool leak in error paths lan966x_fdma_rx_alloc() creates a page pool but does not destroy it if the subsequent fdma_alloc_coherent() call fails, leaking the pool. Similarly, lan966x_fdma_init() frees the coherent DMA memory when lan966x_fdma_tx_alloc() fails but does not destroy the page pool that was successfully created by lan966x_fdma_rx_alloc(), leaking it. Add the missing page_pool_destroy() calls in both error paths.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.3% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-401

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥6.2.1  –  <6.12.82
linuxlinux_kernel*≥6.13  –  <6.18.23
linuxlinux_kernel*≥6.19  –  <6.19.13
linuxlinux_kernel6.2any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/076344a6ad9d1308faaed1402fdcfdda68b604ab
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/22e1ee9f22b5c3bb702bb6d4167d770002a85b2b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4941e234cfd67ac911fb259642b453f9f76aac41
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/73e940c4249dc5ec6422d1fae535d192fb125955
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/076344a6ad9d1308faaed1402fdcfdda68b604ab
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/22e1ee9f22b5c3bb702bb6d4167d770002a85b2b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/4941e234cfd67ac911fb259642b453f9f76aac41
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/73e940c4249dc5ec6422d1fae535d192fb125955
    Patch