CVE-2026-31658
net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()
Reported by linux · Published April 24, 2026
In the Linux kernel, the following vulnerability has been resolved: net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() When dma_map_single() fails in tse_start_xmit(), the function returns NETDEV_TX_OK without freeing the skb. Since NETDEV_TX_OK tells the stack the packet was consumed, the skb is never freed, leaking memory on every DMA mapping failure. Add dev_kfree_skb_any() before returning to properly free the skb.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| Linux | Linux | d5ec406f0543bd6cdfd563b08015fdec8c4d5712, 9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7, 6dede3967619b5944003227a5d09fdc21ed57d10, 60f462cd2716d86bd2174f9d5e035c9278f30480, 3aca300e88afe56afb000cdc4c65383014fb17f9, 3.15, 2eb9d67704ca8f1101f7435b85f113ede471f9f2 |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | bbd2190ce96d8fce031f0526c1f970b68adc9d1a, bbd2190ce96d8fce031f0526c1f970b68adc9d1a, bbd2190ce96d8fce031f0526c1f970b68adc9d1a |
| Linux | Linux | 3.15, 0, 5.10.253 |
| Siemens | SIPLUS S7-1500 CPU 1518-4 PN/DP MFP | 3.1.6, 3.1.7, 3.1.5 |
| Linux | Linux | 6.18.23, 6.6.135, 6.12.82 |
| Siemens | SIMATIC S7-1500 CPU 1518-4 PN/DP MFP | 3.1.7, 3.1.5, 3.1.6 |
| Siemens | SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP | 3.1.5, 3.1.7, 3.1.6 |
| linux | linux_kernel | 3.15, 3.15, 3.15 |
Timeline
- Apr 24, 2026 CVE Published
- Apr 24, 2026 Security Advisory (103 in total, the first dated here)
- May 18, 2026 EPSS Score (24 in total, the first dated here)
- Jul 18, 2026 Coalition ESS Score
- Aug 11, 2026 Distribution Patch (97 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2026-31658
vulnetix vdb fixes CVE-2026-31658Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-31658/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart