CVE-2026-99047 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached to an allocated buf_state when stopping rings. This issue was hit in production.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux	Linux Linux Kernel

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/506f9de069d07a72b9887ce3edd2fdf32f4953aa
https://git.kernel.org/stable/c/73670ddb91a4d22e1deb3efd962242de1ec48e90
https://git.kernel.org/stable/c/7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7

History

Fri, 23 Oct 2026 21:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Linux linux
Vendors & Products		Linux linux

Fri, 23 Oct 2026 16:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-399 CWE-401

Fri, 23 Oct 2026 12:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached to an allocated buf_state when stopping rings. This issue was hit in production.
Title		gve: fix XSK buffer leak when rings are stopped
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/506f9de069d07a72b9887ce3edd2fdf32f4953aa https://git.kernel.org/stable/c/73670ddb91a4d22e1deb3efd962242de1ec48e90 https://git.kernel.org/stable/c/7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-10-23T12:22:12.104Z

Updated: 2026-10-23T12:22:12.104Z

Reserved: 2026-09-25T10:25:14.388Z

Link: CVE-2026-99047

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-23T13:17:28.183

Modified: 2026-10-23T13:17:28.183

Link: CVE-2026-99047

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-99047", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.388Z", "datePublished": "2026-10-23T12:22:12.104Z", "dateUpdated": "2026-10-23T12:22:12.104Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-23T12:22:12.104Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix XSK buffer leak when rings are stopped\n\nGVE does not free XSK buffers when resetting ring state as a part of\nstopping queues. This causes all XSK buffers which are posted to the\nNIC to be leaked.\n\nFree XSK buffers attached to an allocated buf_state when stopping rings.\n\nThis issue was hit in production."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/google/gve/gve_rx_dqo.c"], "versions": [{"version": "c1fffc5d66a7147d557736c2341a511e0896d9ff", "lessThan": "506f9de069d07a72b9887ce3edd2fdf32f4953aa", "status": "affected", "versionType": "git"}, {"version": "c1fffc5d66a7147d557736c2341a511e0896d9ff", "lessThan": "7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7", "status": "affected", "versionType": "git"}, {"version": "c1fffc5d66a7147d557736c2341a511e0896d9ff", "lessThan": "73670ddb91a4d22e1deb3efd962242de1ec48e90", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/google/gve/gve_rx_dqo.c"], "versions": [{"version": "6.17", "status": "affected"}, {"version": "0", "lessThan": "6.17", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.57", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.11", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "6.18.57"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "7.2.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/506f9de069d07a72b9887ce3edd2fdf32f4953aa"}, {"url": "https://git.kernel.org/stable/c/7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7"}, {"url": "https://git.kernel.org/stable/c/73670ddb91a4d22e1deb3efd962242de1ec48e90"}], "title": "gve: fix XSK buffer leak when rings are stopped", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/google/gve/gve_rx_dqo.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "506f9de069d07a72b9887ce3edd2fdf32f4953aa", "status": "affected", "version": "c1fffc5d66a7147d557736c2341a511e0896d9ff", "versionType": "git"}, {"lessThan": "7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7", "status": "affected", "version": "c1fffc5d66a7147d557736c2341a511e0896d9ff", "versionType": "git"}, {"lessThan": "73670ddb91a4d22e1deb3efd962242de1ec48e90", "status": "affected", "version": "c1fffc5d66a7147d557736c2341a511e0896d9ff", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/google/gve/gve_rx_dqo.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.17"}, {"lessThan": "6.17", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.57", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.11", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix XSK buffer leak when rings are stopped\n\nGVE does not free XSK buffers when resetting ring state as a part of\nstopping queues. This causes all XSK buffers which are posted to the\nNIC to be leaked.\n\nFree XSK buffers attached to an allocated buf_state when stopping rings.\n\nThis issue was hit in production."}], "id": "CVE-2026-99047", "lastModified": "2026-10-23T13:17:28.183", "metrics": {}, "published": "2026-10-23T13:17:28.183", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/506f9de069d07a72b9887ce3edd2fdf32f4953aa"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/73670ddb91a4d22e1deb3efd962242de1ec48e90"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}