CVE-2026-99046: gve: fix XSK buffer leak on error descriptor

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-23 · updated 2026-10-24

Description

In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the buf_state and its attached buffer should be freed. In the case of AF_XDP ZC, the XSK buffer was not freed, leading to a leak. This issue was caught by LLM.

Affected products

Linux kernel: 6.17 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/06656aaa7e43ae62b673c2244d27099b8b94a70d
https://git.kernel.org/stable/c/889f763874855c575429f75946132a53c573aa14
https://git.kernel.org/stable/c/9fed6a8ab8a5bacba2c709cb19d2dd6d2fa9112e

Get alerted when CVE-2026-99046 or the next vulnerability affects your stack