CVE-2026-68129

A flaw was found in the Linux kernel's gve driver. Under extreme memory pressure, the driver's receive (Rx) buffer refill process can fail, causing the number of buffers available to hardware to drop below a critical threshold. This can lead to a permanent network queue stall, where the device drops incoming packets and network processing (NAPI) is not scheduled, effectively causing a Denial of Service (DoS).

This issue affects Google Virtual Ethernet (gve) NICs. Rx buffer refill failures under memory pressure can stall the queue when buffers fall below the critical threshold. Systems without gve hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the gve module from loading. See https://access.redhat.com/solutions/41278 for instructions.