CVE-2026-98131

Source
https://cve.org/CVERecord?id=CVE-2026-98131
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98131.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98131
Downstream
Published
2026-09-25T10:36:11Z
Modified
2026-09-26T03:48:33Z
Summary
net: stmmac: fix dma mapping leak in stmmac_tso_xmit()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: stmmac: fix dma mapping leak in stmmac_tso_xmit()

In stmmac_tso_xmit(), if the DMA mapping of an skb fragment fails, the frame is dropped but the DMA mappings already created for the linear part and for the fragments mapped before the failure are never unmapped, leaking DMA mappings.

Fix the leak by walking back over the descriptors used by the frame and releasing each of them with stmmac_free_tx_buffer(). Moreover, release the descriptors with stmmac_release_tx_desc() unmapping the DMA buffers.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98131.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f748be531d7012c456b97f66091d86b3675c5fef
Fixed
e85adaac3dc6317cae902372c6849189ec62cf7d
Fixed
a5d946466a95621fa2769720d59ea336003aa1a5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98131.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.7.0
Fixed
7.2.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98131.json"