{"id":"CVE-2026-98492","summary":"net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths\n\nFix 3 leaks in macb_alloc() error paths:\n- Tx buffer allocated but crossing a 4G boundary: Tx leaked.\n- Rx buffer allocation fails: Tx leaked.\n- Rx buffer allocated but crossing a 4G boundary: Tx & Rx leaked.\n\nThis is because our error handling calls macb_free(bp) which in turn\nfrees the buffers stored in bp-\u003equeues[0], but nothing has been stored\nin there. Fix by storing allocated buffers into bp-\u003equeues[0] ASAP.","modified":"2026-10-19T02:46:29.017302923Z","published":"2026-10-18T15:16:21.208Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98492.json"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/23d42b9a3bcd55b17d3b371544fedc708c2397e9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/259e6cbb6a097da8ced544ee92a6fbde35aa1338"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bda487567d0b7b15dfa876511085c0666b9efad5"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98492.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98492"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"78d901897b3cae06b38f54e48a2378cf9da21175"},{"fixed":"bda487567d0b7b15dfa876511085c0666b9efad5"},{"fixed":"259e6cbb6a097da8ced544ee92a6fbde35aa1338"},{"fixed":"23d42b9a3bcd55b17d3b371544fedc708c2397e9"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.17.3"},{"fixed":"6.18"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"982a4d9a2e12b693f684eff943043a607628d871"}]}],"versions":["v6.17.13","v6.17.12","v6.17.11","v6.17.10","v6.17.9","v6.17.8","v6.17.7","v6.17.6","v6.17.5","v6.17.4","v6.17.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98492.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.0"},{"fixed":"6.18.55"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.9"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98492.json"}}],"schema_version":"1.9.0"}