VULNERABILITY INTELLIGENCE

CVE-2026-99046

CVSS score7.5 HIGH

EPSS probability0.53%

CISA KEVNot currently listed

Published2026-10-23

Last modified2026-10-24

Description

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the buf_state and its attached buffer should be freed. In the case of AF_XDP ZC, the XSK buffer was not freed, leading to a leak. This issue was caught by LLM.