{"id":"CVE-2026-64110","title":"igc: fix potential skb leak in igc_fpe_xmit_smd_frame()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nigc: fix potential skb leak in igc_fpe_xmit_smd_frame()\n\nWhen igc_fpe_init_tx_descriptor() fails, no one takes care of an\nallocated skb, leaking it. [1]\nUse dev_kfree_s…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 5422570c0010bb968738f9256eb2bf83e79b4d63 < f1bafd35f11b3aca1c7bb38da173b8787364a04c","Linux >= 5422570c0010bb968738f9256eb2bf83e79b4d63 < 3ebf056556138e74c640e6dc2b3848abd398b460","Linux >= 5422570c0010bb968738f9256eb2bf83e79b4d63 < e935c37b8a94bb256fada6395a5d05e1c0c6bdaf","Linux 6.16"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:30:07.742531Z"},"published":"2026-07-19","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:34:26.176Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-64110","references":[{"url":"https://git.kernel.org/stable/c/f1bafd35f11b3aca1c7bb38da173b8787364a04c"},{"url":"https://git.kernel.org/stable/c/3ebf056556138e74c640e6dc2b3848abd398b460"},{"url":"https://git.kernel.org/stable/c/e935c37b8a94bb256fada6395a5d05e1c0c6bdaf"}],"tags":["cve.org"],"epss":0.0016,"epssPercentile":0.05209,"ingestedAt":"2026-11-06T16:57:43.236Z","slug":"CVE-2026-64110","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nigc: fix potential skb leak in igc_fpe_xmit_smd_frame()\n\nWhen igc_fpe_init_tx_descriptor() fails, no one takes care of an\nallocated skb, leaking it. [1]\nUse dev_kfree_skb_any() on failure.\n\nTested on an I226 adapter with the following command, while injecting\nfaults in igc_fpe_init_tx_descriptor() to trigger the error path.\n # ethtool --set-mm $DEV verify-enabled on tx-enabled on pmac-enabled on\n\n[1]\nunreferenced object 0xffff888113c6cdc0 (size 224):\n...\n  backtrace (crc be3d3fda):\n    kmem_cache_alloc_node_noprof+0x3b1/0x410\n    __alloc_skb+0xde/0x830\n    igc_fpe_xmit_smd_frame.isra.0+0xad/0x1b0\n    igc_fpe_send_mpacket+0x37/0x90\n    ethtool_mmsv_verify_timer+0x15e/0x300\n\n## Affected\n\n- `Linux >= 5422570c0010bb968738f9256eb2bf83e79b4d63 < f1bafd35f11b3aca1c7bb38da173b8787364a04c`\n- `Linux >= 5422570c0010bb968738f9256eb2bf83e79b4d63 < 3ebf056556138e74c640e6dc2b3848abd398b460`\n- `Linux >= 5422570c0010bb968738f9256eb2bf83e79b4d63 < e935c37b8a94bb256fada6395a5d05e1c0c6bdaf`\n- `Linux 6.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}