CVE-2026-31658 PUBLISHED

net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

Assigner: Linux
Reserved: 09.03.2026 Published: 24.04.2026 Updated: 24.04.2026

In the Linux kernel, the following vulnerability has been resolved:

net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()

When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure.

Add dev_kfree_skb_any() before returning to properly free the skb.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from bbd2190ce96d8fce031f0526c1f970b68adc9d1a to ae2cd46f57f422b51aedd406ff5d75cbff401d5d (excl.)
  • affected from bbd2190ce96d8fce031f0526c1f970b68adc9d1a to cb1d318702fdf643061350d164250198df4116f2 (excl.)
  • affected from bbd2190ce96d8fce031f0526c1f970b68adc9d1a to d5ec406f0543bd6cdfd563b08015fdec8c4d5712 (excl.)
  • affected from bbd2190ce96d8fce031f0526c1f970b68adc9d1a to 2eb9d67704ca8f1101f7435b85f113ede471f9f2 (excl.)
  • affected from bbd2190ce96d8fce031f0526c1f970b68adc9d1a to 9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7 (excl.)
  • affected from bbd2190ce96d8fce031f0526c1f970b68adc9d1a to 60f462cd2716d86bd2174f9d5e035c9278f30480 (excl.)
  • affected from bbd2190ce96d8fce031f0526c1f970b68adc9d1a to 3aca300e88afe56afb000cdc4c65383014fb17f9 (excl.)
  • affected from bbd2190ce96d8fce031f0526c1f970b68adc9d1a to 6dede3967619b5944003227a5d09fdc21ed57d10 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 3.15 is affected
  • unaffected from 0 to 3.15 (excl.)
  • unaffected from 5.10.253 to 5.10.* (incl.)
  • unaffected from 5.15.203 to 5.15.* (incl.)
  • unaffected from 6.1.169 to 6.1.* (incl.)
  • unaffected from 6.6.135 to 6.6.* (incl.)
  • unaffected from 6.12.82 to 6.12.* (incl.)
  • unaffected from 6.18.23 to 6.18.* (incl.)
  • unaffected from 6.19.13 to 6.19.* (incl.)
  • unaffected from 7.0 to * (incl.)

References