CVE-2026-68321

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-68321", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-30T09:28:09.382Z", "datePublished": "2026-08-10T12:02:56.166Z", "dateUpdated": "2026-08-17T05:03:18.882Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:03:18.882Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: txgbe: fix FDIR filter leak on remove\n\nPerfect FDIR filters can be added while the interface is down and are\nkept on the software list for later restore. unregister_netdev() only\ncalls ndo_stop when the device is up, so txgbe_fdir_filter_exit() in\ntxgbe_close() is skipped in that case and the filters are leaked on\ndriver remove. Free the filter list from txgbe_remove() as well."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/wangxun/txgbe/txgbe_main.c"], "versions": [{"version": "4bdb441105dcea40ac6e01756314c0fdf5173ce1", "lessThan": "5c2f04258be2645cdd8f87553990948e7054e7fb", "status": "affected", "versionType": "git"}, {"version": "4bdb441105dcea40ac6e01756314c0fdf5173ce1", "lessThan": "2d34421bfa261f7e83bea2f2f75fa75e0c3037d1", "status": "affected", "versionType": "git"}, {"version": "4bdb441105dcea40ac6e01756314c0fdf5173ce1", "lessThan": "4946dea2386333e5d93bfb36df803fefb5a8c635", "status": "affected", "versionType": "git"}, {"version": "4bdb441105dcea40ac6e01756314c0fdf5173ce1", "lessThan": "ecaa37826340520664a4e5522f803ff48fc3f564", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/wangxun/txgbe/txgbe_main.c"], "versions": [{"version": "6.11", "status": "affected"}, {"version": "0", "lessThan": "6.11", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.42", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.6", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "6.18.42"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.1.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/5c2f04258be2645cdd8f87553990948e7054e7fb"}, {"url": "https://git.kernel.org/stable/c/2d34421bfa261f7e83bea2f2f75fa75e0c3037d1"}, {"url": "https://git.kernel.org/stable/c/4946dea2386333e5d93bfb36df803fefb5a8c635"}, {"url": "https://git.kernel.org/stable/c/ecaa37826340520664a4e5522f803ff48fc3f564"}], "title": "net: txgbe: fix FDIR filter leak on remove", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/wangxun/txgbe/txgbe_main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "5c2f04258be2645cdd8f87553990948e7054e7fb", "status": "affected", "version": "4bdb441105dcea40ac6e01756314c0fdf5173ce1", "versionType": "git"}, {"lessThan": "2d34421bfa261f7e83bea2f2f75fa75e0c3037d1", "status": "affected", "version": "4bdb441105dcea40ac6e01756314c0fdf5173ce1", "versionType": "git"}, {"lessThan": "4946dea2386333e5d93bfb36df803fefb5a8c635", "status": "affected", "version": "4bdb441105dcea40ac6e01756314c0fdf5173ce1", "versionType": "git"}, {"lessThan": "ecaa37826340520664a4e5522f803ff48fc3f564", "status": "affected", "version": "4bdb441105dcea40ac6e01756314c0fdf5173ce1", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/wangxun/txgbe/txgbe_main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.11"}, {"lessThan": "6.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.42", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: txgbe: fix FDIR filter leak on remove\n\nPerfect FDIR filters can be added while the interface is down and are\nkept on the software list for later restore. unregister_netdev() only\ncalls ndo_stop when the device is up, so txgbe_fdir_filter_exit() in\ntxgbe_close() is skipped in that case and the filters are leaked on\ndriver remove. Free the filter list from txgbe_remove() as well."}], "id": "CVE-2026-68321", "lastModified": "2026-08-17T05:18:35.060", "metrics": {}, "published": "2026-08-10T13:20:22.170", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2d34421bfa261f7e83bea2f2f75fa75e0c3037d1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4946dea2386333e5d93bfb36df803fefb5a8c635"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5c2f04258be2645cdd8f87553990948e7054e7fb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ecaa37826340520664a4e5522f803ff48fc3f564"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel (txgbe): Resource leak in FDIR filter handling leading to denial of service", "id": "2513184", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2513184"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: txgbe: fix FDIR filter leak on remove\nPerfect FDIR filters can be added while the interface is down and are\nkept on the software list for later restore. unregister_netdev() only\ncalls ndo_stop when the device is up, so txgbe_fdir_filter_exit() in\ntxgbe_close() is skipped in that case and the filters are leaked on\ndriver remove. Free the filter list from txgbe_remove() as well.", "A flaw was found in the Linux kernel. A resource leak vulnerability exists in the txgbe network driver. This flaw occurs because Flow Director (FDIR) filters are not properly freed when the network interface is removed while it is in a down state. This can lead to a gradual consumption of system resources, potentially resulting in a Denial of Service (DoS) over time."], "name": "CVE-2026-68321", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:enterprise_linux_nvidia:", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux for NVIDIA 26"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-08-10T12:02:56Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-68321\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-68321\nhttps://git.kernel.org/stable/c/2d34421bfa261f7e83bea2f2f75fa75e0c3037d1\nhttps://git.kernel.org/stable/c/4946dea2386333e5d93bfb36df803fefb5a8c635\nhttps://git.kernel.org/stable/c/5c2f04258be2645cdd8f87553990948e7054e7fb\nhttps://git.kernel.org/stable/c/ecaa37826340520664a4e5522f803ff48fc3f564"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4bdb441105dcea40ac6e01756314c0fdf5173ce1,5c2f04258be2645cdd8f87553990948e7054e7fb)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4bdb441105dcea40ac6e01756314c0fdf5173ce1,2d34421bfa261f7e83bea2f2f75fa75e0c3037d1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4bdb441105dcea40ac6e01756314c0fdf5173ce1,4946dea2386333e5d93bfb36df803fefb5a8c635)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[4bdb441105dcea40ac6e01756314c0fdf5173ce1,ecaa37826340520664a4e5522f803ff48fc3f564)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.101,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.42,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.6,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc5,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-10T17:30:17.999477+00:00", "updated": "2026-08-13T06:00:04.717195+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}