Description
In the Linux kernel, the following vulnerability has been resolved:
net: lan966x: fix page pool leak in error paths
lan966x_fdma_rx_alloc() creates a page pool but does not destroy it if the subsequent fdma_alloc_coherent() call fails, leaking the pool.
Similarly, lan966x_fdma_init() frees the coherent DMA memory when lan966x_fdma_tx_alloc() fails but does not destroy the page pool that was successfully created by lan966x_fdma_rx_alloc(), leaking it.
Add the missing page_pool_destroy() calls in both error paths.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 11871aba19748b3387e83a2db6360aa7119e9a1a, < a229a4dc87302fa131f3394b09b0efd8c255a5ac; >= 11871aba19748b3387e83a2db6360aa7119e9a1a, < 73e940c4249dc5ec6422d1fae535d192fb125955; >= 11871aba19748b3387e83a2db6360aa7119e9a1a, < 22e1ee9f22b5c3bb702bb6d4167d770002a85b2b; >= 11871aba19748b3387e83a2db6360aa7119e9a1a, < 4941e234cfd67ac911fb259642b453f9f76aac41; >= 11871aba19748b3387e83a2db6360aa7119e9a1a, < 076344a6ad9d1308faaed1402fdcfdda68b604ab |
| Linux | Linux | 6.2 |
References
- https://git.kernel.org/stable/c/076344a6ad9d1308faaed1402fdcfdda68b604abPatch
- https://git.kernel.org/stable/c/22e1ee9f22b5c3bb702bb6d4167d770002a85b2bPatch
- https://git.kernel.org/stable/c/4941e234cfd67ac911fb259642b453f9f76aac41Patch
- https://git.kernel.org/stable/c/73e940c4249dc5ec6422d1fae535d192fb125955Patch
- https://git.kernel.org/stable/c/a229a4dc87302fa131f3394b09b0efd8c255a5ac
Timeline
- Published
- Apr 24, 2026
- Last modified
- Nov 11, 2026
- NVD status
- Modified