Log in Start free

Vulnerability · Published Oct 23, 2026 · Assigned by Linux

CVE-2026-99057xen/netfront: don't leak the skb when xennet_fill_frags() fails

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 91.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: don't leak the skb when xennet_fill_frags() fails When a response chain has more slots than fit in the skb's frags, xennet_fill_frags() returns an error and xennet_poll() jumps to its error path. That path moves what's left on tmpq to errq to be freed, but the skb being filled was already dequeued from tmpq, so it's never freed. Each chain that overflows leaks the skb and the pages attached to it as frags, and the backend decides how many slots it sends. Put the skb back on tmpq before taking the error path, like the xennet_set_skb_gso() failure just above it does.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2026-99057
Debian:13linux6.12.113-1DEBIAN-CVE-2026-99057
Debian:14linux7.2.11-1DEBIAN-CVE-2026-99057
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.10linux7.3.0-10.10UBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.10linux-aws7.3.0-1004.4UBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.10linux-azureno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.10linux-gcp7.3.0-1004.4UBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-hwe-7.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-oem-7.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.10linux-oracle7.3.0-1004.4UBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.10linux-raspi7.3.0-1004.4UBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.10linux-realtime7.3.0-10.10.1UBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99057
Ubuntu:26.10linux-riscv7.3.0-10.10.1UBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-riscv-7.0no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-99057
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-99057
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-99057

Affected products (as reported)

VendorProductVersions
Linux Linux ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c – before 6e6bd1051daabc327233c3ca3d00613fc6783c8ead4f15dc2c70b1de5e0a64d27335962fbc9cf71c – before 0cf0a25a639c535146c5eb4480d256995721aed6ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c – before 53a131eb2a998c77e2851401b32b712d6c6e8487ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c – before 5051df031144753d3e18862514969146b601d089ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c – before 99011a11c97340ef7290df7dc199305c73fab2f2ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c – before 086944c1c2cbb683543bc3ff08637847b03c8009ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c – before 84e3ea6502b5f14ce8d499d0b6e0e38386274cf0ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c – before 93ccaf1c26e2133396173b76a071e59024daa622
Linux Linux 4.19

References