---
id: CVE-2026-99047
title: 'gve: fix XSK buffer leak when rings are stopped'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  gve: fix XSK buffer leak when rings are stopped

  GVE does not free XSK buffers when resetting ring state as a part of
  stopping queues. This causes all XSK buffers which…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff <
    506f9de069d07a72b9887ce3edd2fdf32f4953aa
  - >-
    Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff <
    7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7
  - >-
    Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff <
    73670ddb91a4d22e1deb3efd962242de1ec48e90
  - Linux 6.17
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T12:22:12.104Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-99047'
references:
  - url: 'https://git.kernel.org/stable/c/506f9de069d07a72b9887ce3edd2fdf32f4953aa'
  - url: 'https://git.kernel.org/stable/c/7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7'
  - url: 'https://git.kernel.org/stable/c/73670ddb91a4d22e1deb3efd962242de1ec48e90'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.525Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

gve: fix XSK buffer leak when rings are stopped

GVE does not free XSK buffers when resetting ring state as a part of
stopping queues. This causes all XSK buffers which are posted to the
NIC to be leaked.

Free XSK buffers attached to an allocated buf_state when stopping rings.

This issue was hit in production.

## Affected

- `Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff < 506f9de069d07a72b9887ce3edd2fdf32f4953aa`
- `Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff < 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7`
- `Linux >= c1fffc5d66a7147d557736c2341a511e0896d9ff < 73670ddb91a4d22e1deb3efd962242de1ec48e90`
- `Linux 6.17`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.