« Volver al listado

CVE-2026-72017

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

net: macb: drop in-flight Tx SKBs on close

The MACB driver has since forever leaked the outgoing SKBs that have not yet been marked as completed. They live in queue->tx_skb which gets freed without remorse nor checking.

macb_free_consistent() gets called in a few codepaths, but only close will trigger the added expressions. In macb_open() and macb_alloc_consistent() failure cases, queues' tx_skb just got allocated and are empty.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-72017",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be",
              "lessThan": "0e9797dc4ebdefe1b7f931b1f92d5e98e5dbf655",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be",
              "lessThan": "6124bd785073659c99385094657b77382ebce11b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be",
              "lessThan": "2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be",
              "lessThan": "26b131b2d5b55a81ef6182769d28105a870c0eb2",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be",
              "lessThan": "109241d9880488aafd8e104832b4d4859ad57244",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be",
              "lessThan": "27f575836cfebbf872dec020428742b10650a955",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/net/ethernet/cadence/macb_main.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.20"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "2.6.20",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.1.184",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.148",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.101",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/net/ethernet/cadence/macb_main.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-08-15T06:21:00.550",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/0e9797dc4ebdefe1b7f931b1f92d5e98e5dbf655",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/109241d9880488aafd8e104832b4d4859ad57244",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/26b131b2d5b55a81ef6182769d28105a870c0eb2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/27f575836cfebbf872dec020428742b10650a955",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6124bd785073659c99385094657b77382ebce11b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: drop in-flight Tx SKBs on close\n\nThe MACB driver has since forever leaked the outgoing SKBs that\nhave not yet been marked as completed. They live in queue->tx_skb\nwhich gets freed without remorse nor checking.\n\nmacb_free_consistent() gets called in a few codepaths, but only close will\ntrigger the added expressions. In macb_open() and macb_alloc_consistent()\nfailure cases, queues' tx_skb just got allocated and are empty."
    }
  ],
  "lastModified": "2026-08-23T13:16:37.357",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}