CVE-2026-72339

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An off-by-one error exists in the BD ring consumption when qede build skb() fails. The functions qede rx build skb() and qede tpa rx build skb() fail to check for a NULL return from qede build skb(). Under memory pressure, if a NULL is returned, these functions still consume a BD from the ring. Subsequent recycling of additional BDs by callers leads to the consumption of one extra BD, desynchronizing the BD ring. This can result in the corruption of DMA page reference counts and SLUB freelist corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.