CVE-2026-68135
kernel: net: hip04: fix RX buffer leak on build_skb failure
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's hip04 network driver. This vulnerability occurs when the build_skb() function fails during the hip04_rx_poll() operation. The driver incorrectly proceeds without releasing the network receive (RX) buffer and its associated Direct Memory Access (DMA) mapping. This leads to a resource leak, which could be exploited by a local attacker to cause a Denial of Service (DoS) by exhausting available memory resources.
Statement
This issue affects HiSilicon hip04 network adapters. RX buffers leak when build_skb() fails during hip04_rx_poll(). Systems without hip04 hardware are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent the hip04 module from loading. See https://access.redhat.com/solutions/41278 for instructions.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime