In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX… (CVE-2026-99046)

The Linux kernel's gve driver had a vulnerability where, if the error bit was set in the RX completion descriptor, the buffer state and its attached buffer should have been freed. However, in the case of AF_XDP zero-copy mode, the XSK buffer was not freed, causing a buffer leak. This defect was identified and fixed, eliminating the leak.

The vulnerability causes a buffer leak in the kernel when error conditions occur in the RX completion descriptor for AF_XDP zero-copy mode. This could lead to resource exhaustion over time, potentially degrading system performance or stability. No information about active exploitation or direct compromise is provided.

This issue has been resolved in the Linux kernel. Users should apply the official Linux kernel update that includes the fix for this vulnerability. No additional mitigation steps are indicated.