Buffer Release Vulnerability in Linux Kernel by Mellanox Technologies

CVE-2026-99079

What is CVE-2026-99079?

A vulnerability was identified in the Linux kernel related to the mlx5e driver, where improper handling of the XSK buffer can lead to buffer overrides and potential data issues during operating conditions. Specifically, when an XDP redirect fails due to the RX ring being full, the XSK core inadvertently frees the corresponding buffer. In subsequent operations, if buffers are not properly managed, stale pointers may result in unintended data exposure or corruption. This can occur silently without any kernel warnings, making the monitoring and management of buffer allocations critical, especially under high packet throughput. This vulnerability underscores the importance of thorough buffer management practices to maintain data integrity and system reliability.

References