In the Linux kernel, the following vulnerability has been resolved:

net: hip04: fix RX buffer leak on build_skb failure

When build_skb() fails in hip04_rx_poll(), the driver jumps to the
refill path without releasing the current RX buffer and its DMA mapping.
Installing a replacement buffer then overwrites the slot references and
leaks both resources.

Keep the current slot intact and return budget so NAPI retries the same
buffer. Also free a newly allocated RX fragment when dma_map_single()
fails.

This issue was found by an in-house static analysis tool.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
701a0fd5231866db08cebcd502894699f49cb960 affected < e054dcd990d8180cde529ea28ce0838e76a5ad5e
701a0fd5231866db08cebcd502894699f49cb960 affected < 67a7614bde310da006ab259f4f163d3fb0f9e253
701a0fd5231866db08cebcd502894699f49cb960 affected < 80d977f280b4eccd4ac5369871d0ecb2b9c9a49d
701a0fd5231866db08cebcd502894699f49cb960 affected < a0f247d63489a107bbc3b712a77b302af2a2a173
701a0fd5231866db08cebcd502894699f49cb960 affected < 14fa65d10f5696b063a7d8d26e8291ea84a2c6ed
Linux Linux affected
Version Status Constraints
4.5 affected —
0 unaffected < 4.5
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc5 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/14fa65d10f5696b063a7d8d26e8291ea84a2c6ed cve-icon
https://git.kernel.org/stable/c/67a7614bde310da006ab259f4f163d3fb0f9e253 cve-icon
https://git.kernel.org/stable/c/80d977f280b4eccd4ac5369871d0ecb2b9c9a49d cve-icon
https://git.kernel.org/stable/c/a0f247d63489a107bbc3b712a77b302af2a2a173 cve-icon
https://git.kernel.org/stable/c/e054dcd990d8180cde529ea28ce0838e76a5ad5e cve-icon
History

Mon, 10 Aug 2026 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-399

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources. Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails. This issue was found by an in-house static analysis tool.
Title net: hip04: fix RX buffer leak on build_skb failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T11:58:58.463Z

Reserved: 2026-07-30T09:28:09.370Z

Link: CVE-2026-68135

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T19:00:04Z

Weaknesses