CVE-2026-68135
net: hip04: fix RX buffer leak on build_skb failure
Description
In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources. Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails. This issue was found by an in-house static analysis tool.
INFO
Published Date :
Aug. 10, 2026, 1:19 p.m.
Last Modified :
Aug. 10, 2026, 1:19 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
- Apply the patch to the Linux kernel.
- Ensure RX buffers and DMA mappings are released.
- Free RX fragments when dma_map_single fails.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-68135.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-68135 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-68135
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-68135 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-68135 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 10, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '701a0fd5231866db08cebcd502894699f49cb960', 'lessThan': 'e054dcd990d8180cde529ea28ce0838e76a5ad5e', 'versionType': 'git'}, {'status': 'affected', 'version': '701a0fd5231866db08cebcd502894699f49cb960', 'lessThan': '67a7614bde310da006ab259f4f163d3fb0f9e253', 'versionType': 'git'}, {'status': 'affected', 'version': '701a0fd5231866db08cebcd502894699f49cb960', 'lessThan': '80d977f280b4eccd4ac5369871d0ecb2b9c9a49d', 'versionType': 'git'}, {'status': 'affected', 'version': '701a0fd5231866db08cebcd502894699f49cb960', 'lessThan': 'a0f247d63489a107bbc3b712a77b302af2a2a173', 'versionType': 'git'}, {'status': 'affected', 'version': '701a0fd5231866db08cebcd502894699f49cb960', 'lessThan': '14fa65d10f5696b063a7d8d26e8291ea84a2c6ed', 'versionType': 'git'}], 'programFiles': ['drivers/net/ethernet/hisilicon/hip04_eth.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.5'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.5', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '6.6.148', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.101', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.42', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.6', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc5', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/net/ethernet/hisilicon/hip04_eth.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffer and its DMA mapping. Installing a replacement buffer then overwrites the slot references and leaks both resources. Keep the current slot intact and return budget so NAPI retries the same buffer. Also free a newly allocated RX fragment when dma_map_single() fails. This issue was found by an in-house static analysis tool. Added Reference https://git.kernel.org/stable/c/14fa65d10f5696b063a7d8d26e8291ea84a2c6ed Added Reference https://git.kernel.org/stable/c/67a7614bde310da006ab259f4f163d3fb0f9e253 Added Reference https://git.kernel.org/stable/c/80d977f280b4eccd4ac5369871d0ecb2b9c9a49d Added Reference https://git.kernel.org/stable/c/a0f247d63489a107bbc3b712a77b302af2a2a173 Added Reference https://git.kernel.org/stable/c/e054dcd990d8180cde529ea28ce0838e76a5ad5e