AZL-83639
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-83639.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-83639
- Upstream
- Published
- 2026-04-24T15:16:43Z
- Modified
- 2026-08-28T17:47:51Z
- Summary
- CVE-2026-31646 affecting package kernel for versions less than 6.6.137.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()
page_pool_create() can return an ERR_PTR on failure. The return value is used unconditionally in the loop that follows, passing the error pointer through xdp_rxq_info_reg_mem_model() into page_pool_use_xdp_mem(), which dereferences it, causing a kernel oops.
Add an IS_ERR check after page_pool_create() to return early on failure.
- References