CVE-2026-74525

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-74525", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-15T05:44:03.911Z", "datePublished": "2026-08-15T12:27:42.344Z", "dateUpdated": "2026-08-19T16:38:29.844Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-19T16:38:29.844Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sxgbe: free TX rings on RX allocation failure\n\nWhen RX descriptor ring allocation fails, init_dma_desc_rings() only\nfrees the partially allocated RX rings and returns. The TX rings that\nwere allocated earlier in the same function are leaked.\n\nRearrange error labels to clean up TX rings upon RX failures."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c"], "versions": [{"version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "923389d0370b4117bd579784442e8450f9bb89be", "status": "affected", "versionType": "git"}, {"version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "a07a69f472fff1c6edf77ca97616381657a8444c", "status": "affected", "versionType": "git"}, {"version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "f52de3ea462229457334c9d3c0d95a7856908664", "status": "affected", "versionType": "git"}, {"version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "3563e2486dcd50a751dbcbc1de37e5186646dce6", "status": "affected", "versionType": "git"}, {"version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "b33644a4f6d8f127c62d7b39f24114d3d2499204", "status": "affected", "versionType": "git"}, {"version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb", "status": "affected", "versionType": "git"}, {"version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "f2e5bb9fb710553e76a3be9097b448b4e73d8c92", "status": "affected", "versionType": "git"}, {"version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "lessThan": "c870f7e2890b9f78ac84515a9809cc5c183c975e", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c"], "versions": [{"version": "3.15", "status": "affected"}, {"version": "0", "lessThan": "3.15", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.265", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.216", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.183", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.151", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.103", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.44", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.8", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.15", "versionEndExcluding": "5.10.265"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.15", "versionEndExcluding": "5.15.216"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.15", "versionEndExcluding": "6.1.183"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.15", "versionEndExcluding": "6.6.151"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.15", "versionEndExcluding": "6.12.103"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.15", "versionEndExcluding": "6.18.44"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.15", "versionEndExcluding": "7.1.8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.15", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/923389d0370b4117bd579784442e8450f9bb89be"}, {"url": "https://git.kernel.org/stable/c/a07a69f472fff1c6edf77ca97616381657a8444c"}, {"url": "https://git.kernel.org/stable/c/f52de3ea462229457334c9d3c0d95a7856908664"}, {"url": "https://git.kernel.org/stable/c/3563e2486dcd50a751dbcbc1de37e5186646dce6"}, {"url": "https://git.kernel.org/stable/c/b33644a4f6d8f127c62d7b39f24114d3d2499204"}, {"url": "https://git.kernel.org/stable/c/42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb"}, {"url": "https://git.kernel.org/stable/c/f2e5bb9fb710553e76a3be9097b448b4e73d8c92"}, {"url": "https://git.kernel.org/stable/c/c870f7e2890b9f78ac84515a9809cc5c183c975e"}], "title": "net: sxgbe: free TX rings on RX allocation failure", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "923389d0370b4117bd579784442e8450f9bb89be", "status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "versionType": "git"}, {"lessThan": "a07a69f472fff1c6edf77ca97616381657a8444c", "status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "versionType": "git"}, {"lessThan": "f52de3ea462229457334c9d3c0d95a7856908664", "status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "versionType": "git"}, {"lessThan": "3563e2486dcd50a751dbcbc1de37e5186646dce6", "status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "versionType": "git"}, {"lessThan": "b33644a4f6d8f127c62d7b39f24114d3d2499204", "status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "versionType": "git"}, {"lessThan": "42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb", "status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "versionType": "git"}, {"lessThan": "f2e5bb9fb710553e76a3be9097b448b4e73d8c92", "status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "versionType": "git"}, {"lessThan": "c870f7e2890b9f78ac84515a9809cc5c183c975e", "status": "affected", "version": "1edb9ca69e8a7988900fc0283e10550b5592164d", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.15"}, {"lessThan": "3.15", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.265", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.216", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.183", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.151", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.103", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.44", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.8", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sxgbe: free TX rings on RX allocation failure\n\nWhen RX descriptor ring allocation fails, init_dma_desc_rings() only\nfrees the partially allocated RX rings and returns. The TX rings that\nwere allocated earlier in the same function are leaked.\n\nRearrange error labels to clean up TX rings upon RX failures."}], "id": "CVE-2026-74525", "lastModified": "2026-08-19T17:21:09.177", "metrics": {}, "published": "2026-08-15T13:17:57.763", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3563e2486dcd50a751dbcbc1de37e5186646dce6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/923389d0370b4117bd579784442e8450f9bb89be"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a07a69f472fff1c6edf77ca97616381657a8444c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b33644a4f6d8f127c62d7b39f24114d3d2499204"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c870f7e2890b9f78ac84515a9809cc5c183c975e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f2e5bb9fb710553e76a3be9097b448b4e73d8c92"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f52de3ea462229457334c9d3c0d95a7856908664"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: net: sxgbe: free TX rings on RX allocation failure", "id": "2516987", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516987"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: sxgbe: free TX rings on RX allocation failure\nWhen RX descriptor ring allocation fails, init_dma_desc_rings() only\nfrees the partially allocated RX rings and returns. The TX rings that\nwere allocated earlier in the same function are leaked.\nRearrange error labels to clean up TX rings upon RX failures.", "A flaw was found in the Linux kernel's sxgbe network driver. When the system fails to allocate receive (RX) descriptor rings, the transmit (TX) rings that were previously allocated are not properly released. This oversight leads to a memory leak, which could result in resource exhaustion and potentially a Denial of Service (DoS) for the affected system."], "name": "CVE-2026-74525", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-74525\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-74525\nhttps://lore.kernel.org/linux-cve-announce/2026081545-CVE-2026-74525-47b2@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1edb9ca69e8a7988900fc0283e10550b5592164d,3563e2486dcd50a751dbcbc1de37e5186646dce6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1edb9ca69e8a7988900fc0283e10550b5592164d,b33644a4f6d8f127c62d7b39f24114d3d2499204)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1edb9ca69e8a7988900fc0283e10550b5592164d,42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1edb9ca69e8a7988900fc0283e10550b5592164d,f2e5bb9fb710553e76a3be9097b448b4e73d8c92)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1edb9ca69e8a7988900fc0283e10550b5592164d,c870f7e2890b9f78ac84515a9809cc5c183c975e)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "3.15"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,3.15)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.6.151,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.12.103,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[6.18.44,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1.8,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc6,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T15:30:09.535682+00:00", "updated": "2026-08-21T23:30:17.181280+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}