SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-80987

HIGH · CVSS 7.5 EPSS 0.45%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the NTB (Non-Transparent Bridge) transport layer, where oversized transmit (TX) buffers are improperly handled, leading to memory leaks due to a NULL data pointer being passed. This flaw can result in resource exhaustion and degraded system performance. Linux system administrators and developers utilizing NTB transport should prioritize applying the patch to mitigate potential memory management issues.

CVE
CVE-2026-80987
Severity
HIGH
CVSS
7.5
EPSS
0.45%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Reject oversized TX buffers ntb_process_tx() handles an oversized buffer by calling tx_handler() with a NULL data pointer and returning success. ntb_netdev therefore neither frees the skb in its completion callback nor takes its enqueue error path, leaking it. Reject oversized buffers in ntb_transport_tx_enqueue() before acquiring a queue entry and return -EMSGSIZE. The caller retains ownership of the buffer, and the preceding netdev patch frees the skb when enqueue returns this permanent error.