In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers… (CVE-2026-99047)

The Linux kernel's gve driver had a vulnerability where it failed to free XSK buffers when stopping rings by resetting ring state. This caused all XSK buffers posted to the NIC to leak, potentially leading to resource exhaustion. The fix involves freeing XSK buffers attached to an allocated buf_state during ring stoppage. This vulnerability was encountered in production and has been resolved.

The vulnerability causes a memory/resource leak of XSK buffers in the gve driver when rings are stopped. This can lead to resource exhaustion on affected systems, potentially impacting system stability or performance. There is no indication of direct code execution or privilege escalation from this issue.

A fix has been implemented to free XSK buffers when stopping rings in the gve driver. Users should update to the Linux kernel version that includes this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel release notes for the exact fixed version and apply the update accordingly.