AZL-97359
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-97359.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-97359
- Upstream
- Published
- 2026-08-22T16:16:41Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-74678 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: usb: ax88179178a: fix skb leak in ax88179tx_fixup()
When the interface has NETIFFSG enabled and skblinearize() fails in ax88179tx_fixup(), the function returns NULL without freeing the skb.
usbnetstartxmit() treats a NULL return from txfixup() as a drop (info->flags does not set FLAGMULTIPACKET for this driver), jumping to the "drop" label where it does
if (skb) dev_kfree_skb_any(skb). Because txfixup() returned NULL, the local skb variable in usbnetstartxmit() is NULL, so the original skb is never freed — a memory leak on every TX frame whose linearization fails (i.e. under memory pressure).Free the skb before returning, matching the error handling already used for the pskbexpandhead() failure path in the same function.
- References