CVE Database›Document archive›CVE-2026-68135

CVE-2026-68135

kernel: net: hip04: fix RX buffer leak on build_skb failure

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 10, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's hip04 network driver. This vulnerability occurs when the build_skb() function fails during the hip04_rx_poll() operation. The driver incorrectly proceeds without releasing the network receive (RX) buffer and its associated Direct Memory Access (DMA) mapping. This leads to a resource leak, which could be exploited by a local attacker to cause a Denial of Service (DoS) by exhausting available memory resources.

Statement

This issue affects HiSilicon hip04 network adapters. RX buffers leak when build_skb() fails during hip04_rx_poll(). Systems without hip04 hardware are not affected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the hip04 module from loading. See https://access.redhat.com/solutions/41278 for instructions.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime