{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72017", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.900Z", "datePublished": "2026-08-15T05:51:44.698Z", "dateUpdated": "2026-08-17T05:06:39.772Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:06:39.772Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: drop in-flight Tx SKBs on close\n\nThe MACB driver has since forever leaked the outgoing SKBs that\nhave not yet been marked as completed. They live in queue->tx_skb\nwhich gets freed without remorse nor checking.\n\nmacb_free_consistent() gets called in a few codepaths, but only close will\ntrigger the added expressions. In macb_open() and macb_alloc_consistent()\nfailure cases, queues' tx_skb just got allocated and are empty."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cadence/macb_main.c"], "versions": [{"version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "lessThan": "6124bd785073659c99385094657b77382ebce11b", "status": "affected", "versionType": "git"}, {"version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "lessThan": "2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4", "status": "affected", "versionType": "git"}, {"version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "lessThan": "26b131b2d5b55a81ef6182769d28105a870c0eb2", "status": "affected", "versionType": "git"}, {"version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "lessThan": "109241d9880488aafd8e104832b4d4859ad57244", "status": "affected", "versionType": "git"}, {"version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "lessThan": "27f575836cfebbf872dec020428742b10650a955", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cadence/macb_main.c"], "versions": [{"version": "2.6.20", "status": "affected"}, {"version": "0", "lessThan": "2.6.20", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.148", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.20", "versionEndExcluding": "6.6.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.20", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.20", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.20", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.20", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/6124bd785073659c99385094657b77382ebce11b"}, {"url": "https://git.kernel.org/stable/c/2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4"}, {"url": "https://git.kernel.org/stable/c/26b131b2d5b55a81ef6182769d28105a870c0eb2"}, {"url": "https://git.kernel.org/stable/c/109241d9880488aafd8e104832b4d4859ad57244"}, {"url": "https://git.kernel.org/stable/c/27f575836cfebbf872dec020428742b10650a955"}], "title": "net: macb: drop in-flight Tx SKBs on close", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/cadence/macb_main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "6124bd785073659c99385094657b77382ebce11b", "status": "affected", "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "versionType": "git"}, {"lessThan": "2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4", "status": "affected", "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "versionType": "git"}, {"lessThan": "26b131b2d5b55a81ef6182769d28105a870c0eb2", "status": "affected", "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "versionType": "git"}, {"lessThan": "109241d9880488aafd8e104832b4d4859ad57244", "status": "affected", "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "versionType": "git"}, {"lessThan": "27f575836cfebbf872dec020428742b10650a955", "status": "affected", "version": "89e5785fc8a6b9eafd37f2318a9a76d479c796be", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/cadence/macb_main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.20"}, {"lessThan": "2.6.20", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.148", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: drop in-flight Tx SKBs on close\n\nThe MACB driver has since forever leaked the outgoing SKBs that\nhave not yet been marked as completed. They live in queue->tx_skb\nwhich gets freed without remorse nor checking.\n\nmacb_free_consistent() gets called in a few codepaths, but only close will\ntrigger the added expressions. In macb_open() and macb_alloc_consistent()\nfailure cases, queues' tx_skb just got allocated and are empty."}], "id": "CVE-2026-72017", "lastModified": "2026-08-17T06:17:59.220", "metrics": {}, "published": "2026-08-15T06:21:00.550", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/109241d9880488aafd8e104832b4d4859ad57244"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/26b131b2d5b55a81ef6182769d28105a870c0eb2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/27f575836cfebbf872dec020428742b10650a955"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6124bd785073659c99385094657b77382ebce11b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: net: macb: drop in-flight Tx SKBs on close", "id": "2516635", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516635"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["A flaw was found in the Linux kernel's MACB network driver. This driver fails to properly release outgoing Socket Kernel Buffers (SKBs) when the driver is closed. This continuous leakage of resources can lead to resource exhaustion over time, potentially resulting in a Denial of Service (DoS) condition for the system."], "name": "CVE-2026-72017", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-72017\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72017\nhttps://lore.kernel.org/linux-cve-announce/2026081509-CVE-2026-72017-598c@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89e5785fc8a6b9eafd37f2318a9a76d479c796be,6124bd785073659c99385094657b77382ebce11b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89e5785fc8a6b9eafd37f2318a9a76d479c796be,2143fdc0ce27adbb1caaa1a97e0bfb9f3750aef4)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89e5785fc8a6b9eafd37f2318a9a76d479c796be,26b131b2d5b55a81ef6182769d28105a870c0eb2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89e5785fc8a6b9eafd37f2318a9a76d479c796be,109241d9880488aafd8e104832b4d4859ad57244)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[89e5785fc8a6b9eafd37f2318a9a76d479c796be,27f575836cfebbf872dec020428742b10650a955)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.6.20"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,2.6.20)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.148,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.101,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.40,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc3,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T13:00:05.417167+00:00", "updated": "2026-08-18T04:15:04.826055+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}