CVE-2026-31737

MEDIUM EPSS 2.4%
Published May 1, 20262mo ago · Modified Jun 17, 20262w ago
5.5 CVSS 3.1
Medium
Find Similar
Published May 1, 2026 2mo ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix ring allocation unwind on open failure ftgmac100_alloc_rings() allocates rx_skbs, tx_skbs, rxdes, txdes, and rx_scratch in stages. On intermediate failures it returned -ENOMEM directly, leaking resources allocated earlier in the function. Rework the failure path to use staged local unwind labels and free allocated resources in reverse order before returning -ENOMEM. This matches common netdev allocation cleanup style.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
2.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 13

VendorProductVersionRange
linuxlinux_kernel*≥4.12  –  <5.10.253
linuxlinux_kernel*≥5.11  –  <5.15.203
linuxlinux_kernel*≥5.16  –  <6.1.168
linuxlinux_kernel*≥6.2  –  <6.6.134
linuxlinux_kernel*≥6.7  –  <6.12.81
linuxlinux_kernel*≥6.13  –  <6.18.22
linuxlinux_kernel*≥6.19  –  <6.19.12
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 8

  • git.kernel.org https://git.kernel.org/stable/c/184b3a500d60ea48d1b176103cff1706c456edf3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78da43320d9d6ed788147fb085184e4fc801f057
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/82f86111f0704ab2ded11a2033bc6cf0be3e09ea
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8351d18989c8642fc53e2e12d94e42314a39b078
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8a71911fc7eeea930153322bc1efc065db8cd97e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a7e1bf392acf11dc4209820fef75758f6e42bd65
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c0fd0fe745f5e8c568d898cd1513d0083e46204a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d45230081f19c280096241353c26b0de457de795
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/184b3a500d60ea48d1b176103cff1706c456edf3
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78da43320d9d6ed788147fb085184e4fc801f057
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/82f86111f0704ab2ded11a2033bc6cf0be3e09ea
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8351d18989c8642fc53e2e12d94e42314a39b078
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8a71911fc7eeea930153322bc1efc065db8cd97e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a7e1bf392acf11dc4209820fef75758f6e42bd65
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c0fd0fe745f5e8c568d898cd1513d0083e46204a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/d45230081f19c280096241353c26b0de457de795
    Patch