Threats Tagged 'cve-2026-46102'

In the Linux kernel, the following vulnerability has been resolved: net: strparser: fix skb_head leak in strp_abort_strp() When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp->skb_head. That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory. Fix this by freeing strp->skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized.

CVE-2026-46102 is a vulnerability related to a memory leak in the network subsystem, specifically involving the strparser component's strp_abort_strp() function. The issue causes a leak of skb_head structures, which are kernel socket buffers, potentially leading to resource exhaustion. This vulnerability affects Microsoft products including Azure Linux 3.0. There is no CVSS score or detailed impact information provided. No known exploits are reported in the wild. Patch status is not confirmed as no patch or vendor advisory details are available.