Medium 5.5Published May 1, 2026

CVE-2026-31737net: ftgmac100: fix ring allocation unwind on open failure

Updated under an hour ago (Oct 27, 2026, 6:50 PM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: ftgmac100: fix ring allocation unwind on open failure ftgmac100_alloc_rings() allocates rx_skbs, tx_skbs, rxdes, txdes, and rx_scratch in stages. On intermediate failures it returned -ENOMEM directly, leaking resources allocated earlier in the function. Rework the failure path to use staged local unwind labels and free allocated resources in reverse order before returning -ENOMEM. This matches common netdev allocation cleanup style.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e before 184b3a500d60ea48d1b176103cff1706c456edf3; from d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e before 78da43320d9d6ed788147fb085184e4fc801f057; from d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e before a7e1bf392acf11dc4209820fef75758f6e42bd65; from d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e before 8a71911fc7eeea930153322bc1efc065db8cd97e; from d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e before d45230081f19c280096241353c26b0de457de795; from d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e before 8351d18989c8642fc53e2e12d94e42314a39b078; from d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e before 82f86111f0704ab2ded11a2033bc6cf0be3e09ea; from d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e before c0fd0fe745f5e8c568d898cd1513d0083e46204a	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	from 4.12 before 5.10.253; from 5.11 before 5.15.203; from 5.16 before 6.1.168; from 6.2 before 6.6.134; from 6.7 before 6.12.81; from 6.13 before 6.18.22; from 6.19 before 6.19.12; 7.0; and 5 more ranges	NVD

References

References

https://git.kernel.org/stable/c/184b3a500d60ea48d1b176103cff1706c456edf3	patch
https://git.kernel.org/stable/c/78da43320d9d6ed788147fb085184e4fc801f057	patch
https://git.kernel.org/stable/c/a7e1bf392acf11dc4209820fef75758f6e42bd65	patch
https://git.kernel.org/stable/c/8a71911fc7eeea930153322bc1efc065db8cd97e	patch
https://git.kernel.org/stable/c/d45230081f19c280096241353c26b0de457de795	patch
https://git.kernel.org/stable/c/8351d18989c8642fc53e2e12d94e42314a39b078	patch
https://git.kernel.org/stable/c/82f86111f0704ab2ded11a2033bc6cf0be3e09ea	patch
https://git.kernel.org/stable/c/c0fd0fe745f5e8c568d898cd1513d0083e46204a	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
1–10 of 11

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.