CVE-2026-99047 is a vulnerability in Linux Kernel
Published on October 23, 2026
gve: fix XSK buffer leak when rings are stopped
In the Linux kernel, the following vulnerability has been resolved:
gve: fix XSK buffer leak when rings are stopped
GVE does not free XSK buffers when resetting ring state as a part of
stopping queues. This causes all XSK buffers which are posted to the
NIC to be leaked.
Free XSK buffers attached to an allocated buf_state when stopping rings.
This issue was hit in production.
Products Associated with CVE-2026-99047
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version c1fffc5d66a7147d557736c2341a511e0896d9ff and below 506f9de069d07a72b9887ce3edd2fdf32f4953aa is affected.
- Version c1fffc5d66a7147d557736c2341a511e0896d9ff and below 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7 is affected.
- Version c1fffc5d66a7147d557736c2341a511e0896d9ff and below 73670ddb91a4d22e1deb3efd962242de1ec48e90 is affected.
- Version 6.17 is affected.
- Before 6.17 is unaffected.
- Version 6.18.57, <= 6.18.* is unaffected.
- Version 7.2.11, <= 7.2.* is unaffected.
- Version 7.3, <= * is unaffected.