CVE-2026-99046 is a vulnerability in Linux Kernel
Published on October 23, 2026
gve: fix XSK buffer leak on error descriptor
In the Linux kernel, the following vulnerability has been resolved:
gve: fix XSK buffer leak on error descriptor
When the error bit is set in the RX completion descriptor, the buf_state
and its attached buffer should be freed. In the case of AF_XDP ZC, the
XSK buffer was not freed, leading to a leak.
This issue was caught by LLM.
Products Associated with CVE-2026-99046
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version c1fffc5d66a7147d557736c2341a511e0896d9ff and below 06656aaa7e43ae62b673c2244d27099b8b94a70d is affected.
- Version c1fffc5d66a7147d557736c2341a511e0896d9ff and below 889f763874855c575429f75946132a53c573aa14 is affected.
- Version c1fffc5d66a7147d557736c2341a511e0896d9ff and below 9fed6a8ab8a5bacba2c709cb19d2dd6d2fa9112e is affected.
- Version 6.17 is affected.
- Before 6.17 is unaffected.
- Version 6.18.57, <= 6.18.* is unaffected.
- Version 7.2.11, <= 7.2.* is unaffected.
- Version 7.3, <= * is unaffected.