CVE-2026-98131CWE-401

CVE-2026-98131

Medium · published September 25, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: stmmac: fix dma mapping leak in stmmac_tso_xmit()

In stmmac_tso_xmit(), if the DMA mapping of an skb fragment fails, the

frame is dropped but the DMA mappings already created for the linear

part and for the fragments mapped before the failure are never

unmapped, leaking DMA mappings.

Fix the leak by walking back over the descriptors used by the frame and

releasing each of them with stmmac_free_tx_buffer(). Moreover, release

the descriptors with stmmac_release_tx_desc() unmapping the DMA buffers.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00122 · 1.8th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2026-09-25T15:17Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 4.7, < 7.2.77.2.7
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 27 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 25 SEP 10:36Z
    net: stmmac: fix dma mapping leak in stmmac_tso_xmit()
    cvelistv5