CVE-2026-46322

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the Linux kernel when the build skb() function fails within the tun xdp one() function. In this scenario, the system sets the return value to -ENOMEM and exits without freeing the page allocated by vhost net build xdp() for the frame. Because tun sendmsg() discards the per-buffer error and returns the total length, vhost tx batch() assumes success and fails to free the page, resulting in the leak of one page-frag chunk for every build skb() failure in a batch.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.