Not yet scoredPublished Aug 15, 2026

CVE-2026-74525net: sxgbe: free TX rings on RX allocation failure

Updated under an hour ago (Oct 28, 2026, 1:20 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: free TX rings on RX allocation failure When RX descriptor ring allocation fails, init_dma_desc_rings() only frees the partially allocated RX rings and returns. The TX rings that were allocated earlier in the same function are leaked. Rearrange error labels to clean up TX rings upon RX failures.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1edb9ca69e8a7988900fc0283e10550b5592164d before 923389d0370b4117bd579784442e8450f9bb89be; from 1edb9ca69e8a7988900fc0283e10550b5592164d before a07a69f472fff1c6edf77ca97616381657a8444c; from 1edb9ca69e8a7988900fc0283e10550b5592164d before f52de3ea462229457334c9d3c0d95a7856908664; from 1edb9ca69e8a7988900fc0283e10550b5592164d before 3563e2486dcd50a751dbcbc1de37e5186646dce6; from 1edb9ca69e8a7988900fc0283e10550b5592164d before b33644a4f6d8f127c62d7b39f24114d3d2499204; from 1edb9ca69e8a7988900fc0283e10550b5592164d before 42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb; from 1edb9ca69e8a7988900fc0283e10550b5592164d before f2e5bb9fb710553e76a3be9097b448b4e73d8c92; from 1edb9ca69e8a7988900fc0283e10550b5592164d before c870f7e2890b9f78ac84515a9809cc5c183c975e	CNA record

References

References

https://git.kernel.org/stable/c/923389d0370b4117bd579784442e8450f9bb89be
https://git.kernel.org/stable/c/a07a69f472fff1c6edf77ca97616381657a8444c
https://git.kernel.org/stable/c/f52de3ea462229457334c9d3c0d95a7856908664
https://git.kernel.org/stable/c/3563e2486dcd50a751dbcbc1de37e5186646dce6
https://git.kernel.org/stable/c/b33644a4f6d8f127c62d7b39f24114d3d2499204
https://git.kernel.org/stable/c/42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb
https://git.kernel.org/stable/c/f2e5bb9fb710553e76a3be9097b448b4e73d8c92
https://git.kernel.org/stable/c/c870f7e2890b9f78ac84515a9809cc5c183c975e

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.