Medium · published April 24, 2026
In the Linux kernel, the following vulnerability has been resolved:
net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
When dma_map_single() fails in tse_start_xmit(), the function returns
NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the
stack the packet was consumed, the skb is never freed, leaking memory
on every DMA mapping failure.
Add dev_kfree_skb_any() before returning to properly free the skb.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 3.15.1, < 5.10.253 | 5.10.253 |
| linux/linux_kernel | ≥ 5.11, < 5.15.203 | 5.15.203 |
| linux/linux_kernel | ≥ 5.16, < 6.1.169 | 6.1.169 |
| linux/linux_kernel | ≥ 6.2, < 6.6.135 | 6.6.135 |
| linux/linux_kernel | ≥ 6.7, < 6.12.82 | 6.12.82 |
| linux/linux_kernel | ≥ 6.13, < 6.18.23 | 6.18.23 |
| linux/linux_kernel | ≥ 6.19, < 6.19.13 | 6.19.13 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |