Memory Leak Vulnerability in Linux Kernel UDP Tunnel NIC Code

CVE-2026-74543

What is CVE-2026-74543?

A memory leak has been identified in the UDP tunnel NIC offload code of the Linux kernel. The issue occurs when device registration fails, causing certain network device notifications to fail to trigger necessary cleanup operations. This results in a permanent leak of allocated resources, leading to increased memory consumption over time. The vulnerability is resolved by ensuring that pending work is cancelled before freeing allocated resources, thus improving system performance and stability.

References