CVE-2026-74525

A flaw was found in the Linux kernel's sxgbe network driver. When the system fails to allocate receive (RX) descriptor rings, the transmit (TX) rings that were previously allocated are not properly released. This oversight leads to a memory leak, which could result in resource exhaustion and potentially a Denial of Service (DoS) for the affected system.

A flaw of moderate severity was found in the Linux kernel's sxgbe network driver. When receive (RX) descriptor ring allocation fails during driver initialization in init_dma_desc_rings(), the transmit (TX) descriptor rings that were allocated earlier in the same function are not released, resulting in a memory leak. Repeated or persistent triggering of this error path could lead to memory resource exhaustion and a denial of service. Red Hat rates this flaw with a CVSS 3.1 score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), reflecting that the leak occurs in a local driver error-handling path. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt components listed in this flaw are currently marked not affected because the vulnerable code is not present in the Red Hat kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.