---
id: CVE-2026-98492
title: 'net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths

  Fix 3 leaks in macb_alloc() error paths:
  - Tx buffer allocated but crossing a 4G boundary: Tx leak…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 78d901897b3cae06b38f54e48a2378cf9da21175 <
    bda487567d0b7b15dfa876511085c0666b9efad5
  - >-
    Linux >= 78d901897b3cae06b38f54e48a2378cf9da21175 <
    259e6cbb6a097da8ced544ee92a6fbde35aa1338
  - >-
    Linux >= 78d901897b3cae06b38f54e48a2378cf9da21175 <
    23d42b9a3bcd55b17d3b371544fedc708c2397e9
  - Linux 982a4d9a2e12b693f684eff943043a607628d871
  - Linux >= 6.17.3 < 6.18
  - Linux 6.18
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:16:21.208Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98492'
references:
  - url: 'https://git.kernel.org/stable/c/bda487567d0b7b15dfa876511085c0666b9efad5'
  - url: 'https://git.kernel.org/stable/c/259e6cbb6a097da8ced544ee92a6fbde35aa1338'
  - url: 'https://git.kernel.org/stable/c/23d42b9a3bcd55b17d3b371544fedc708c2397e9'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.290Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths

Fix 3 leaks in macb_alloc() error paths:
- Tx buffer allocated but crossing a 4G boundary: Tx leaked.
- Rx buffer allocation fails: Tx leaked.
- Rx buffer allocated but crossing a 4G boundary: Tx & Rx leaked.

This is because our error handling calls macb_free(bp) which in turn
frees the buffers stored in bp->queues[0], but nothing has been stored
in there. Fix by storing allocated buffers into bp->queues[0] ASAP.

## Affected

- `Linux >= 78d901897b3cae06b38f54e48a2378cf9da21175 < bda487567d0b7b15dfa876511085c0666b9efad5`
- `Linux >= 78d901897b3cae06b38f54e48a2378cf9da21175 < 259e6cbb6a097da8ced544ee92a6fbde35aa1338`
- `Linux >= 78d901897b3cae06b38f54e48a2378cf9da21175 < 23d42b9a3bcd55b17d3b371544fedc708c2397e9`
- `Linux 982a4d9a2e12b693f684eff943043a607628d871`
- `Linux >= 6.17.3 < 6.18`
- `Linux 6.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.