CVE-2026-31737 (GCVE-0-2026-31737)
Vulnerability from cvelistv5
Published
2026-05-01 14:14
Modified
2026-05-01 14:14
Severity ?
VLAI Severity ?
EPSS score ?
Summary
In the Linux kernel, the following vulnerability has been resolved:
net: ftgmac100: fix ring allocation unwind on open failure
ftgmac100_alloc_rings() allocates rx_skbs, tx_skbs, rxdes, txdes, and
rx_scratch in stages. On intermediate failures it returned -ENOMEM
directly, leaking resources allocated earlier in the function.
Rework the failure path to use staged local unwind labels and free
allocated resources in reverse order before returning -ENOMEM. This
matches common netdev allocation cleanup style.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Linux | Linux |
Version: d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e Version: d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e Version: d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e Version: d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e Version: d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e Version: d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e Version: d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e Version: d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e |
||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/net/ethernet/faraday/ftgmac100.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "184b3a500d60ea48d1b176103cff1706c456edf3",
"status": "affected",
"version": "d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e",
"versionType": "git"
},
{
"lessThan": "78da43320d9d6ed788147fb085184e4fc801f057",
"status": "affected",
"version": "d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e",
"versionType": "git"
},
{
"lessThan": "a7e1bf392acf11dc4209820fef75758f6e42bd65",
"status": "affected",
"version": "d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e",
"versionType": "git"
},
{
"lessThan": "8a71911fc7eeea930153322bc1efc065db8cd97e",
"status": "affected",
"version": "d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e",
"versionType": "git"
},
{
"lessThan": "d45230081f19c280096241353c26b0de457de795",
"status": "affected",
"version": "d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e",
"versionType": "git"
},
{
"lessThan": "8351d18989c8642fc53e2e12d94e42314a39b078",
"status": "affected",
"version": "d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e",
"versionType": "git"
},
{
"lessThan": "82f86111f0704ab2ded11a2033bc6cf0be3e09ea",
"status": "affected",
"version": "d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e",
"versionType": "git"
},
{
"lessThan": "c0fd0fe745f5e8c568d898cd1513d0083e46204a",
"status": "affected",
"version": "d72e01a0430f8a1ae7adb3cbf0b2e73fcd99252e",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/net/ethernet/faraday/ftgmac100.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "4.12"
},
{
"lessThan": "4.12",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.253",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.203",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.168",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.134",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.81",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.22",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.19.*",
"status": "unaffected",
"version": "6.19.12",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.0",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.253",
"versionStartIncluding": "4.12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.203",
"versionStartIncluding": "4.12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.168",
"versionStartIncluding": "4.12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.134",
"versionStartIncluding": "4.12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.81",
"versionStartIncluding": "4.12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.22",
"versionStartIncluding": "4.12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.19.12",
"versionStartIncluding": "4.12",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.0",
"versionStartIncluding": "4.12",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ftgmac100: fix ring allocation unwind on open failure\n\nftgmac100_alloc_rings() allocates rx_skbs, tx_skbs, rxdes, txdes, and\nrx_scratch in stages. On intermediate failures it returned -ENOMEM\ndirectly, leaking resources allocated earlier in the function.\n\nRework the failure path to use staged local unwind labels and free\nallocated resources in reverse order before returning -ENOMEM. This\nmatches common netdev allocation cleanup style."
}
],
"providerMetadata": {
"dateUpdated": "2026-05-01T14:14:34.229Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/184b3a500d60ea48d1b176103cff1706c456edf3"
},
{
"url": "https://git.kernel.org/stable/c/78da43320d9d6ed788147fb085184e4fc801f057"
},
{
"url": "https://git.kernel.org/stable/c/a7e1bf392acf11dc4209820fef75758f6e42bd65"
},
{
"url": "https://git.kernel.org/stable/c/8a71911fc7eeea930153322bc1efc065db8cd97e"
},
{
"url": "https://git.kernel.org/stable/c/d45230081f19c280096241353c26b0de457de795"
},
{
"url": "https://git.kernel.org/stable/c/8351d18989c8642fc53e2e12d94e42314a39b078"
},
{
"url": "https://git.kernel.org/stable/c/82f86111f0704ab2ded11a2033bc6cf0be3e09ea"
},
{
"url": "https://git.kernel.org/stable/c/c0fd0fe745f5e8c568d898cd1513d0083e46204a"
}
],
"title": "net: ftgmac100: fix ring allocation unwind on open failure",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-31737",
"datePublished": "2026-05-01T14:14:34.229Z",
"dateReserved": "2026-03-09T15:48:24.137Z",
"dateUpdated": "2026-05-01T14:14:34.229Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…