Live › vulnerability › CVE-2026-99047
Go to dashboardIn the Linux gve network driver, AF_XDP (XSK) buffers posted to the NIC are not freed when ring state is reset during queue stop. The sources describe this as a resource leak, and it was reported as hit in production.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Hosts and cloud VMs that run the Linux kernel with the gve driver, which is the Google Compute Engine virtual NIC, and that use AF_XDP sockets on it. Systems without gve interfaces or without XDP/AF_XDP workloads are unlikely to see the leak, but the sources do not say which kernel versions are affected.
No product ranges from the sources yet.
uname -r and compare against the fixed kernel version listed in the NVD entry, unknown from the sourceslspci -k | grep -A3 -i gve or ethtool -i <interface> (driver: gve)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
gve: fix XSK buffer leak when rings are stopped
GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked.
Free XSK buffers attached to an allocated buf_state when stopping rings.
This issue was hit in production.
This page as .md · .json · in your agent: get_signal("CVE-2026-99047")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.