Buffer Management Flaw in Linux Kernel's mlx5e Component

CVE-2026-99078

What is CVE-2026-99078?

A vulnerability exists in the Linux kernel's mlx5e component, which affects the management of XSK buffers during allocation retries on MPWQE. The issue arises when the system defers releasing XSK buffers, potentially leading to stale pointers being used in subsequent operations. This flaw can result in a scenario where buffers are erroneously marked as releasable, allowing them to be freed multiple times upon retries, even after buffers have been reallocated. This vulnerability was exercised under heavy load conditions, revealing that it could handle numerous allocation failures without triggering kernel errors, ultimately affecting the network application's efficiency.

References