{"id":"CVE-2026-31645","revision":"3a9d90b199424da5b5b18a6073818517","records":[{"revision":"3a9d90b199424da5b5b18a6073818517","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-31645","aliases":[],"title":"net: lan966x: fix page pool leak in error paths","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: lan966x: fix page pool leak in error paths\n\nlan966x_fdma_rx_alloc() creates a page pool but does not destroy it if\nthe subsequent fdma_alloc_coherent() call fails, leaking the pool.\n\nSimilarly, lan966x_fdma_init() frees the coherent DMA memory when\nlan966x_fdma_tx_alloc() fails but does not destroy the page pool that\nwas successfully created by lan966x_fdma_rx_alloc(), leaking it.\n\nAdd the missing page_pool_destroy() calls in both error paths.","state":0,"publishedAt":"2026-04-24T14:44:58.868+00:00","modifiedAt":"2026-10-21T12:39:37.535+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/microchip/lan966x/lan966x_fdma.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"11871aba19748b3387e83a2db6360aa7119e9a1a\",\n                            \"lessThan\": \"a229a4dc87302fa131f3394b09b0efd8c255a5ac\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"11871aba19748b3387e83a2db6360aa7119e9a1a\",\n                            \"lessThan\": \"73e940c4249dc5ec6422d1fae535d192fb125955\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"11871aba19748b3387e83a2db6360aa7119e9a1a\",\n                            \"lessThan\": \"22e1ee9f22b5c3bb702bb6d4167d770002a85b2b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"11871aba19748b3387e83a2db6360aa7119e9a1a\",\n                            \"lessThan\": \"4941e234cfd67ac911fb259642b453f9f76aac41\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"11871aba19748b3387e83a2db6360aa7119e9a1a\",\n                            \"lessThan\": \"076344a6ad9d1308faaed1402fdcfdda68b604ab\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/microchip/lan966x/lan966x_fdma.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.2\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.160\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.82\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.23\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19.13\",\n                            \"lessThanOrEqual\": \"6.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.0\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/a229a4dc87302fa131f3394b09b0efd8c255a5ac","https://git.kernel.org/stable/c/73e940c4249dc5ec6422d1fae535d192fb125955","https://git.kernel.org/stable/c/22e1ee9f22b5c3bb702bb6d4167d770002a85b2b","https://git.kernel.org/stable/c/4941e234cfd67ac911fb259642b453f9f76aac41","https://git.kernel.org/stable/c/076344a6ad9d1308faaed1402fdcfdda68b604ab"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-31645","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-31645","identifiers":["CVE-2026-31645"]},"retained":false,"historicalAffected":[]}],"coverage":[]}