{"id":"CVE-2026-99047","title":"gve: fix XSK buffer leak when rings are stopped","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix XSK buffer leak when rings are stopped\n\nGVE does not free XSK buffers when resetting ring state as a part of\nstopping queues. This causes all XSK buffers which…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff < 506f9de069d07a72b9887ce3edd2fdf32f4953aa","Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff < 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7","Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff < 73670ddb91a4d22e1deb3efd962242de1ec48e90","Linux 6.17"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T12:22:12.104Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99047","references":[{"url":"https://git.kernel.org/stable/c/506f9de069d07a72b9887ce3edd2fdf32f4953aa"},{"url":"https://git.kernel.org/stable/c/7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7"},{"url":"https://git.kernel.org/stable/c/73670ddb91a4d22e1deb3efd962242de1ec48e90"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T13:24:55.525Z","slug":"CVE-2026-99047","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix XSK buffer leak when rings are stopped\n\nGVE does not free XSK buffers when resetting ring state as a part of\nstopping queues. This causes all XSK buffers which are posted to the\nNIC to be leaked.\n\nFree XSK buffers attached to an allocated buf_state when stopping rings.\n\nThis issue was hit in production.\n\n## Affected\n\n- `Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff < 506f9de069d07a72b9887ce3edd2fdf32f4953aa`\n- `Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff < 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7`\n- `Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff < 73670ddb91a4d22e1deb3efd962242de1ec48e90`\n- `Linux 6.17`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}