CVE-2026-99045 is a vulnerability in Linux Kernel
Published on October 23, 2026
ibmveth: h_free logical LAN on open-fail after register
In the Linux kernel, the following vulnerability has been resolved:
ibmveth: h_free logical LAN on open-fail after register
ibmveth_open() registers the logical LAN, then allocates the RX
buffer pools. A pool failure jumps to out_free_buffer_pools without
h_free_logical_lan(), so PHYP still owns the buffer-list page when
it is unmapped. request_irq() failure already issued the hypercall
before taking the same label.
Move that h_free to the shared post-register unwind so both paths
deregister before the buffer list is unmapped.
Products Associated with CVE-2026-99045
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version d43732ce021f4244a4c53a45d57ad0c13c30ed94 and below decb4d4ead2c71ef698727734ab5024a872eb372 is affected.
- Version d43732ce021f4244a4c53a45d57ad0c13c30ed94 and below c54bbdf6f0731102a4bf7f5e4ee535b3ea415996 is affected.
- Version d43732ce021f4244a4c53a45d57ad0c13c30ed94 and below a065bd31ec462f6f9c267026b708dd020f122723 is affected.
- Version d43732ce021f4244a4c53a45d57ad0c13c30ed94 and below d24fdec1413c656d29298097926e77542785ca0c is affected.
- Version d43732ce021f4244a4c53a45d57ad0c13c30ed94 and below af0524bf4ce1a4cbd2946aa81751582951cfcab5 is affected.
- Version 4.13 is affected.
- Before 4.13 is unaffected.
- Version 6.6.160, <= 6.6.* is unaffected.
- Version 6.12.113, <= 6.12.* is unaffected.
- Version 6.18.57, <= 6.18.* is unaffected.
- Version 7.2.11, <= 7.2.* is unaffected.
- Version 7.3, <= * is unaffected.