{"id":"CVE-2026-31658","title":"net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()\n\nWhen dma_map_single() fails in tse_start_xmit(), the function returns\nNETDEV_TX_OK without freei…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < ae2cd46f57f422b51aedd406ff5d75cbff401d5d","Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < cb1d318702fdf643061350d164250198df4116f2","Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < d5ec406f0543bd6cdfd563b08015fdec8c4d5712","Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 2eb9d67704ca8f1101f7435b85f113ede471f9f2","Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7","Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 60f462cd2716d86bd2174f9d5e035c9278f30480","Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 3aca300e88afe56afb000cdc4c65383014fb17f9","Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 6dede3967619b5944003227a5d09fdc21ed57d10","Linux 3.15"],"published":"2026-04-24","updated":"2026-09-08","sourceUpdated":"2026-09-08T08:47:54.322Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-31658","references":[{"url":"https://git.kernel.org/stable/c/ae2cd46f57f422b51aedd406ff5d75cbff401d5d"},{"url":"https://git.kernel.org/stable/c/cb1d318702fdf643061350d164250198df4116f2"},{"url":"https://git.kernel.org/stable/c/d5ec406f0543bd6cdfd563b08015fdec8c4d5712"},{"url":"https://git.kernel.org/stable/c/2eb9d67704ca8f1101f7435b85f113ede471f9f2"},{"url":"https://git.kernel.org/stable/c/9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7"},{"url":"https://git.kernel.org/stable/c/60f462cd2716d86bd2174f9d5e035c9278f30480"},{"url":"https://git.kernel.org/stable/c/3aca300e88afe56afb000cdc4c65383014fb17f9"},{"url":"https://git.kernel.org/stable/c/6dede3967619b5944003227a5d09fdc21ed57d10"}],"tags":["cve.org"],"epss":0.00171,"epssPercentile":0.05623,"ingestedAt":"2026-09-08T15:33:26.990Z","slug":"CVE-2026-31658","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()\n\nWhen dma_map_single() fails in tse_start_xmit(), the function returns\nNETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the\nstack the packet was consumed, the skb is never freed, leaking memory\non every DMA mapping failure.\n\nAdd dev_kfree_skb_any() before returning to properly free the skb.\n\n## Affected\n\n- `Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < ae2cd46f57f422b51aedd406ff5d75cbff401d5d`\n- `Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < cb1d318702fdf643061350d164250198df4116f2`\n- `Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < d5ec406f0543bd6cdfd563b08015fdec8c4d5712`\n- `Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 2eb9d67704ca8f1101f7435b85f113ede471f9f2`\n- `Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7`\n- `Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 60f462cd2716d86bd2174f9d5e035c9278f30480`\n- `Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 3aca300e88afe56afb000cdc4c65383014fb17f9`\n- `Linux >= bbd2190ce96d8fce031f0526c1f970b68adc9d1a < 6dede3967619b5944003227a5d09fdc21ed57d10`\n- `Linux 3.15`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}