CVE-2026-99047

Source
https://cve.org/CVERecord?id=CVE-2026-99047
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99047.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-99047
Downstream
Published
2026-10-23T12:22:12Z
Modified
2026-10-25T02:47:29Z
Summary
gve: fix XSK buffer leak when rings are stopped
Details

In the Linux kernel, the following vulnerability has been resolved:

gve: fix XSK buffer leak when rings are stopped

GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked.

Free XSK buffers attached to an allocated buf_state when stopping rings.

This issue was hit in production.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99047.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c1fffc5d66a7147d557736c2341a511e0896d9ff
Fixed
506f9de069d07a72b9887ce3edd2fdf32f4953aa
Fixed
7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7
Fixed
73670ddb91a4d22e1deb3efd962242de1ec48e90

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99047.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.17.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.11

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99047.json"