CVE-2026-31645

medium Red Hat
EPSS Score
0.0%
Exploitation probability in 30 days
Top 95% most likely to be exploited
Published: April 24, 2026 (20 days ago)
Last Modified: April 24, 2026
Vendor: Red Hat
Source: REDHAT

Description

A flaw was found in the Linux kernel's lan966x network driver. This vulnerability, a page pool leak, occurs when certain error paths in the `lan966x_fdma_rx_alloc()` and `lan966x_fdma_init()` functions fail to properly destroy allocated page pools. This oversight can lead to a gradual depletion of system memory resources, potentially resulting in a Denial of Service (DoS) condition where the system becomes unresponsive or crashes.

CWE

CWE-772

Affected Products

Red Hat Enterprise Linux 10Red Hat Enterprise Linux 6Red Hat Enterprise Linux 7Red Hat Enterprise Linux 8Red Hat Enterprise Linux 9

References