CVE-2026-23453

In the Linux kernel, the following vulnerability has been resolved:

net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode

Page recycling was removed from the XDPDROP path in emacrunxdp() to avoid conflicts with AFXDP zero-copy mode, which uses xskbufffree() instead.

However, this causes a memory leak when running XDP programs that drop packets in non-zero-copy mode (standard page pool mode). The pages are never returned to the page pool, leading to OOM conditions.

Fix this by handling cleanup in the caller, emacrxpacket(). When emacrunxdp() returns ICSSGXDPCONSUMED for XDPDROP, the caller now recycles the page back to the page pool. The zero-copy path, emacrxpacketzc() already handles cleanup correctly with xskbufffree().