net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure. Add dev_kfree_skb_any() before returning to properly free the skb.
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure. Add dev_kfree_skb_any() before returning to properly free the skb.
05 / REFERENCES
Further evidence
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/2eb9d67704ca8f1101f7435b85f113ede471f9f2
- https://git.kernel.org/stable/c/3aca300e88afe56afb000cdc4c65383014fb17f9
- https://git.kernel.org/stable/c/60f462cd2716d86bd2174f9d5e035c9278f30480
- https://git.kernel.org/stable/c/6dede3967619b5944003227a5d09fdc21ed57d10
- https://git.kernel.org/stable/c/9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7
- https://git.kernel.org/stable/c/ae2cd46f57f422b51aedd406ff5d75cbff401d5d
- https://git.kernel.org/stable/c/cb1d318702fdf643061350d164250198df4116f2
- https://git.kernel.org/stable/c/d5ec406f0543bd6cdfd563b08015fdec8c4d5712
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31658.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-31658