CVE-2026-98906 net: lan966x: restore RX state on reload failure

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure lan966xfdmareload backs up rx-pagepool and rx-fdma before reallocating the RX resources for the new MTU. If the allocation fails, the restore path puts these fields back before...

CVE-2026-98906

The Linux kernel contains a vulnerability in the lan966x driver where a failed RX resource reallocation during an MTU change results in an inconsistent state. Specifically, while the driver backs up rx->page_pool and rx->fdma, it fails to restore rx->page_order and rx->max_mtu on fail...

EUVD-2026-108862

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure lan966xfdmareload backs up rx-pagepool and rx-fdma before reallocating the RX resources for the new MTU. If the allocation fails, the restore path puts these fields back before...

CVE-2026-98906

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure lan966xfdmareload backs up rx-pagepool and rx-fdma before reallocating the RX resources for the new MTU. If the allocation fails, the restore path puts these fields back before...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: lan966x: A crash occurs when adding an interface under a “lag” condition. A crash occurs when adding one of the lan966x interfaces under a “lag” condition. The issue can be reproduced as follows: bash ip link add name bond0 type...

Linux Ethernet Driver Compromise

The vulnerabilities in the drivers/net/ethernet/microchip/lan966x/lan966xethtool.c, drivers/net/thernet/microchip/lan966x/lan966xmain.c, and drivers/net/thernet/microchip/lan966x/lan966xvcapimpl.c files of the Linux kernel’s Ethernet network adapter drivers are related to improper resource lockin...

lan966x_fdma_reload Heap Buffer Overflow DoS

The vulnerability of the lan966xfdmareload function in the drivers/net/ethernet/microchip/lan966x/lan966xfdma.c file of the Ethernet microchip Linux kernel driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net: lan966x: Fixed issues related to use-after-free and leaks in lan966xfdmareload. When lan966xfdmareload fails to allocate new RX buffers, the restore path restarts DMA using old descriptors whose pages have already been...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - net: lan966x: Fixed a page pool leak in error paths. - lan966xfdmarxalloc creates a page pool, but does not destroy it if the subsequent fdmaalloccoherent call fails, resulting in a leak of the page pool. - lan966xfdmainit...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: The error handling for pagepool has been fixed in lan966xfdmarxallocpagepool. pagepoolcreate may return an ERRPTR on failure. This return value is used unconditionally in the subsequent loop, and the error pointer i...

net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()

...

SUSE CVE-2026-31644

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix use-after-free and leak in lan966xfdmareload When lan966xfdmareload fails to allocate new RX buffers, the restore path restarts DMA using old descriptors whose pages were already freed via lan966xfdmarxfreepages...

SUSE CVE-2026-31645

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page pool leak in error paths lan966xfdmarxalloc creates a page pool but does not destroy it if the subsequent fdmaalloccoherent call fails, leaking the pool. Similarly, lan966xfdmainit frees the coherent DMA...

SUSE CVE-2026-31646

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix pagepool error handling in lan966xfdmarxallocpagepool pagepoolcreate can return an ERRPTR on failure. The return value is used unconditionally in the loop that follows, passing the error pointer through...

Linux Distros Unpatched Vulnerability : CVE-2026-31644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lan966x: fix use-after-free and leak in lan966xfdmareload When lan966xfdmareload fails to allocate new RX buffers, the restore path restarts DMA using old...

Linux Distros Unpatched Vulnerability : CVE-2026-31646

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lan966x: fix pagepool error handling in lan966xfdmarxallocpagepool pagepoolcreate can return an ERRPTR on failure. The return value is used unconditionally...

Linux Distros Unpatched Vulnerability : CVE-2026-31645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: lan966x: fix page pool leak in error paths lan966xfdmarxalloc creates a page pool but does not destroy it if the subsequent fdmaalloccoherent call fails,...

CVE-2026-31646

A flaw was found in the Linux kernel's lan966x network driver. An error in handling the return value from the pagepoolcreate function can lead to the use of an invalid memory pointer. This improper error handling can cause a kernel oops, resulting in a Denial of Service DoS for the affected syste...

CVE-2026-31645

A flaw was found in the Linux kernel's lan966x network driver. This vulnerability, a page pool leak, occurs when certain error paths in the lan966xfdmarxalloc and lan966xfdmainit functions fail to properly destroy allocated page pools. This oversight can lead to a gradual depletion of system memo...

CVE-2026-31644

A flaw was found in the Linux kernel's lan966x network driver. When the lan966xfdmareload function encounters an error during the allocation of new receive RX buffers, it can lead to a use-after-free condition. This occurs because the system may attempt to restart Direct Memory Access DMA...