CVE-2026-74525

Not scored yetLast modified Aug 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: sxgbe: free TX rings on RX allocation failure

When RX descriptor ring allocation fails, init_dma_desc_rings() only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function are leaked.

Rearrange error labels to clean up TX rings upon RX failures.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 1edb9ca69e8a7988900fc0283e10550b5592164d, < 923389d0370b4117bd579784442e8450f9bb89be; >= 1edb9ca69e8a7988900fc0283e10550b5592164d, < a07a69f472fff1c6edf77ca97616381657a8444c; >= 1edb9ca69e8a7988900fc0283e10550b5592164d, < f52de3ea462229457334c9d3c0d95a7856908664; >= 1edb9ca69e8a7988900fc0283e10550b5592164d, < 3563e2486dcd50a751dbcbc1de37e5186646dce6; >= 1edb9ca69e8a7988900fc0283e10550b5592164d, < b33644a4f6d8f127c62d7b39f24114d3d2499204; >= 1edb9ca69e8a7988900fc0283e10550b5592164d, < 42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb; >= 1edb9ca69e8a7988900fc0283e10550b5592164d, < f2e5bb9fb710553e76a3be9097b448b4e73d8c92; >= 1edb9ca69e8a7988900fc0283e10550b5592164d, < c870f7e2890b9f78ac84515a9809cc5c183c975e
LinuxLinux3.15

References

Timeline

Published
Aug 15, 2026
Last modified
Aug 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-74526In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix potential deadlock in mpi3mr_fault_uevent_emit mpi3mCVE-2026-745278.8In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF andCVE-2026-745288.0In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_past_sync() callback Avoids giviCVE-2026-745297.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback ThereCVE-2026-74535.5A maliciously crafted WRL file, when parsed through Autodesk 3ds Max, can cause a Stack Exhaustion vulnerability, leading to a denial-of-serCVE-2026-745308.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback TherCVE-2026-745318.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: hold conn reference in abort_conn_sync() There isCVE-2026-74532In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Validate length before parsing diagnostics TLV btiCVE-2026-745338.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero hci_conn::isCVE-2026-745348.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of iso_conn iso_conn_del() and iso_chaCVE-2026-745358.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout iso_sock_timeout()CVE-2026-74536In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix leaking sk after socket release iso_sock_kill() te
CVE-2026-74525: Unscored | Vulnix