SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72017

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The MACB driver in the Linux kernel has a vulnerability that allows for the leakage of outgoing socket buffers (SKBs) that are not marked as completed, leading to potential memory management issues. This flaw can result in resource exhaustion and instability in systems utilizing the MACB driver. Organizations using affected Linux systems, particularly those relying on the MACB driver for network operations, should prioritize addressing this vulnerability to maintain system integrity and performance.

CVE
CVE-2026-72017
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: net: macb: drop in-flight Tx SKBs on close The MACB driver has since forever leaked the outgoing SKBs that have not yet been marked as completed. They live in queue->tx_skb which gets freed without remorse nor checking. macb_free_consistent() gets called in a few codepaths, but only close will trigger the added expressions. In macb_open() and macb_alloc_consistent() failure cases, queues' tx_skb just got allocated and are empty.