CVE-2026-80988

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB transport module. When the NTB transport attempts to transmit packets while the Queue Pair QP link is down, the system incorrectly reports a successful transmission without properly consuming the packet. This oversight leads to a...

CVE-2026-80987

A flaw was found in the Linux kernel's Non-Transparent Bridge NTB transport module. When processing oversized transmit TX buffers, the system fails to properly free the allocated memory, leading to a memory leak. This continuous leakage of memory could eventually exhaust system resources, resulti...

CVE-2026-80988

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80988

This vulnerability affects the Linux kernel NTB (Non-Transparent Bridge) transport layer. The root cause is in ntb_transport_tx_enqueue(): when the QP link is down, the function returned 0 (indicating success) without consuming the submitted packet. Because the caller (ntb_netdev) treats a zero r...

EUVD-2026-76311

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80988 NTB: ntb_transport: Fail TX enqueue when the QP link is down

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntbtransporttxenqueue drop packets submitted while the QP link is down, but it only returns 0...

CVE-2026-80987 NTB: ntb_transport: Reject oversized TX buffers

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Reject oversized TX buffers ntbprocesstx handles an oversized buffer by calling txhandler with a NULL data pointer and returning success. ntbnetdev therefore neither frees the skb in its completion callback nor...

CVE-2026-80987

CVE-2026-80987 affects the Linux kernel 's NTB (Network-over-Transaction) transport layer. In ntb_process_tx() , an oversized TX buffer is handled by calling tx_handler() with a NULL data pointer while still returning success. As a result, ntb_netdev neither frees the skb in its completion callba...

EUVD-2026-76310

In the Linux kernel, the following vulnerability has been resolved: NTB: ntbtransport: Reject oversized TX buffers ntbprocesstx handles an oversized buffer by calling txhandler with a NULL data pointer and returning success. ntbnetdev therefore neither frees the skb in its completion callback nor...

PT-2026-90118

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 "ntb: Drop packets when qp link is down" meant to make ntb transport tx enqueue drop packets submitted while the QP link is down, but it only return...

PT-2026-90117

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb transport: Reject oversized TX buffers ntb process tx handles an oversized buffer by calling tx handler with a NULL data pointer and returning success. ntb netdev therefore neither frees the skb in its completion callbac...