In the Linux kernel, the following vulnerability has been resolved: net: stmmac: clear stale buf->page after recycling on skb build failure In… (CVE-2026-98571)

In the Linux kernel's stmmac network driver, when napi_build_skb() fails in stmmac_rx(), the descriptor page is recycled back to the page pool, but the buffer's page pointer (buf->page) remains set to the recycled page. This stale pointer causes stmmac_rx_refill() to skip allocating a new page and instead reprograms the recycled page back into the RX descriptor. The fix clears buf->page on the failure path to maintain consistent buffer lifecycle management, preventing potential use of recycled memory.

The vulnerability could lead to inconsistent buffer management in the network driver, potentially causing memory corruption or instability in the kernel's network receive path. No confirmed exploits or CVSS score are available, and the exact impact on system security or stability is not detailed.

A fix has been applied in the Linux kernel to clear the stale buf->page pointer after skb build failure in the stmmac driver. Users should update to the fixed kernel version once available. No additional mitigation steps are specified.