https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 20:27:45 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-98911 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>dpaa2-switch: fix the error path in dpaa2_switch_rx()</p> <p>In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect since the dpaa2_switch_free_fd() is intended to be used on Tx frame descriptors, meaning that it expects in the software annotation area of the FD data to find a valid skb pointer on which to call dev_kfree_skb().</p> <p>Fix this by extracting the dma_unmap_page() from dpaa2_switch_build_linear_skb() directly into the dpaa2_switch_rx() function. This allows us to directly use free_pages() in case of an error before an SKB was created and kfree_skb() afterwards.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>dpaa2-switch: fix the error path in dpaa2_switch_rx()</p> <p>In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect since the dpaa2_switch_free_fd() is intended to be used on Tx frame descriptors, meaning that it expects in the software annotation area of the FD data to find a valid skb pointer on which to call dev_kfree_skb().</p> <p>Fix this by extracting the dma_unmap_page() from dpaa2_switch_build_linear_skb() directly into the dpaa2_switch_rx() function. This allows us to directly use free_pages() in case of an error before an SKB was created and kfree_skb() afterwards.</p> https://db.gcve.eu/vuln/fkie_cve-2026-98911 https://db.gcve.eu/vuln/ghsa-2gxg-jvpv-v5rf <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>dpaa2-switch: fix the error path in dpaa2_switch_rx()</p> <p>In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect since the dpaa2_switch_free_fd() is intended to be used on Tx frame descriptors, meaning that it expects in the software annotation area of the FD data to find a valid skb pointer on which to call dev_kfree_skb().</p> <p>Fix this by extracting the dma_unmap_page() from dpaa2_switch_build_linear_skb() directly into the dpaa2_switch_rx() function. This allows us to directly use free_pages() in case of an error before an SKB was created and kfree_skb() afterwards.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>dpaa2-switch: fix the error path in dpaa2_switch_rx()</p> <p>In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect since the dpaa2_switch_free_fd() is intended to be used on Tx frame descriptors, meaning that it expects in the software annotation area of the FD data to find a valid skb pointer on which to call dev_kfree_skb().</p> <p>Fix this by extracting the dma_unmap_page() from dpaa2_switch_build_linear_skb() directly into the dpaa2_switch_rx() function. This allows us to directly use free_pages() in case of an error before an SKB was created and kfree_skb() afterwards.</p> https://db.gcve.eu/vuln/ghsa-2gxg-jvpv-v5rf https://db.gcve.eu/vuln/msrc_cve-2026-98911 msrc_CVE-2026-98911 https://db.gcve.eu/vuln/msrc_cve-2026-98911