CVE-2026-31737

Source
https://cve.org/CVERecord?id=CVE-2026-31737
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31737.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-31737
Downstream
Published
2026-05-01T14:14:34.229Z
Modified
2026-05-18T05:59:54.515279623Z
Summary
net: ftgmac100: fix ring allocation unwind on open failure
Details

In the Linux kernel, the following vulnerability has been resolved:

net: ftgmac100: fix ring allocation unwind on open failure

ftgmac100allocrings() allocates rxskbs, txskbs, rxdes, txdes, and rx_scratch in stages. On intermediate failures it returned -ENOMEM directly, leaking resources allocated earlier in the function.

Rework the failure path to use staged local unwind labels and free allocated resources in reverse order before returning -ENOMEM. This matches common netdev allocation cleanup style.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31737.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e
Fixed
184b3a500d60ea48d1b176103cff1706c456edf3
Fixed
78da43320d9d6ed788147fb085184e4fc801f057
Fixed
a7e1bf392acf11dc4209820fef75758f6e42bd65
Fixed
8a71911fc7eeea930153322bc1efc065db8cd97e
Fixed
d45230081f19c280096241353c26b0de457de795
Fixed
8351d18989c8642fc53e2e12d94e42314a39b078
Fixed
82f86111f0704ab2ded11a2033bc6cf0be3e09ea
Fixed
c0fd0fe745f5e8c568d898cd1513d0083e46204a

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31737.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.12.0
Fixed
5.10.253
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.203
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.168
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.134
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.81
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.22
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.12

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31737.json"