Medium 5.5Published Apr 24, 2026

CVE-2026-31645net: lan966x: fix page pool leak in error paths

Updated under an hour ago (Oct 27, 2026, 1:40 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: lan966x: fix page pool leak in error paths lan966x_fdma_rx_alloc() creates a page pool but does not destroy it if the subsequent fdma_alloc_coherent() call fails, leaking the pool. Similarly, lan966x_fdma_init() frees the coherent DMA memory when lan966x_fdma_tx_alloc() fails but does not destroy the page pool that was successfully created by lan966x_fdma_rx_alloc(), leaking it. Add the missing page_pool_destroy() calls in both error paths.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 11871aba19748b3387e83a2db6360aa7119e9a1a before a229a4dc87302fa131f3394b09b0efd8c255a5ac; 11871aba19748b3387e83a2db6360aa7119e9a1a builds before 73e940c4249dc5ec6422d1fae535d192fb125955; 11871aba19748b3387e83a2db6360aa7119e9a1a builds before 22e1ee9f22b5c3bb702bb6d4167d770002a85b2b; 11871aba19748b3387e83a2db6360aa7119e9a1a builds before 4941e234cfd67ac911fb259642b453f9f76aac41; from 11871aba19748b3387e83a2db6360aa7119e9a1a before 076344a6ad9d1308faaed1402fdcfdda68b604ab	CNA record
linux linux_kernel linux:linux_kernel	from 6.2.1 before 6.12.82; from 6.13 before 6.18.23; from 6.19 before 6.19.13; 6.2; 7.0; 7.0; 7.0; 7.0; and 3 more ranges	NVD

References

References

https://git.kernel.org/stable/c/a229a4dc87302fa131f3394b09b0efd8c255a5ac
https://git.kernel.org/stable/c/73e940c4249dc5ec6422d1fae535d192fb125955	patch
https://git.kernel.org/stable/c/22e1ee9f22b5c3bb702bb6d4167d770002a85b2b	patch
https://git.kernel.org/stable/c/4941e234cfd67ac911fb259642b453f9f76aac41	patch
https://git.kernel.org/stable/c/076344a6ad9d1308faaed1402fdcfdda68b604ab	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.