CVE-2026-68135

CVE-2026-68135

published August 10, 2026

CVSS
—
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: hip04: fix RX buffer leak on build_skb failure

When build_skb() fails in hip04_rx_poll(), the driver jumps to the

refill path without releasing the current RX buffer and its DMA mapping.

Installing a replacement buffer then overwrites the slot references and

leaks both resources.

Keep the current slot intact and return budget so NAPI retries the same

buffer. Also free a newly allocated RX fragment when dma_map_single()

fails.

This issue was found by an in-house static analysis tool.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Published
2026-08-10T17:19Z
References (8)
EPSS history
Timeline
  • 10 AUG 11:58Z
    net: hip04: fix RX buffer leak on build_skb failure
    cvelistv5