Memory Leak in Airoha QDMA RX Process Affects Linux Kernel

CVE-2026-43102

What is CVE-2026-43102?

A vulnerability in the Linux kernel's airoha QDMA RX process can lead to a memory leak under specific error conditions. When errors occur related to the non-linear parts of the socket buffer (skb), such as incorrect payload lengths from the network interface controller (NIC) or exhaustion of available fragments, the page_pool fragment fails to return to the pool. This oversight in handling memory management can lead to inefficient resource use, necessitating timely updates to mitigate potential exploitation. System administrators are encouraged to implement the recent fixes that address this issue by ensuring that the page_pool_put_full_page routine is executed in the error handling path for the airoha_qdma_rx_process.

References