Linux Kernel - Page Pool Leak Vulnerability in LAN966X by Vendor

CVE-2026-31645

What is CVE-2026-31645?

A resource leak vulnerability exists in the LAN966X component of the Linux kernel. The issue arises during memory allocation processes, specifically in the functions lan966x_fdma_rx_alloc() and lan966x_fdma_init(). When memory allocation fails, corresponding page pools created during these processes are not effectively destroyed, leading to memory leaks. This oversight can degrade system performance and stability over time. The vulnerability has been addressed by adding appropriate page_pool_destroy() calls to ensure that all resources are properly managed, even in error scenarios.

References