CVE-2026-99045

Source
https://cve.org/CVERecord?id=CVE-2026-99045
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99045.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-99045
Downstream
Published
2026-10-23T12:22:09Z
Modified
2026-11-01T02:32:28Z
Summary
ibmveth: h_free logical LAN on open-fail after register
Details

In the Linux kernel, the following vulnerability has been resolved:

ibmveth: h_free logical LAN on open-fail after register

ibmveth_open() registers the logical LAN, then allocates the RX buffer pools. A pool failure jumps to out_free_buffer_pools without h_free_logical_lan(), so PHYP still owns the buffer-list page when it is unmapped. request_irq() failure already issued the hypercall before taking the same label.

Move that h_free to the shared post-register unwind so both paths deregister before the buffer list is unmapped.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99045.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d43732ce021f4244a4c53a45d57ad0c13c30ed94
Fixed
073df7871a7023298ce27cfa518fbc30cc155651
Fixed
7bd67d324d952101b3431c796d79f5e329bba159
Fixed
eae138e880686ce19879aa0d158fa3c73516f632
Fixed
decb4d4ead2c71ef698727734ab5024a872eb372
Fixed
c54bbdf6f0731102a4bf7f5e4ee535b3ea415996
Fixed
a065bd31ec462f6f9c267026b708dd020f122723
Fixed
d24fdec1413c656d29298097926e77542785ca0c
Fixed
af0524bf4ce1a4cbd2946aa81751582951cfcab5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99045.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.13.0
Fixed
5.10.273
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.224
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.113
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.11

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99045.json"