PT-2026-35010 · Linux+1 · Linux Kernel+1

Published 2026-04-24 · Updated 2026-05-03 · CVE-2026-31658

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the Altera TSE driver. When the dma map single() function fails within the tse start xmit() function, the system returns NETDEV TX OK without freeing the socket buffer (skb). Because NETDEV TX OK indicates to the network stack that the packet was consumed, the skb is not released, leading to memory exhaustion on every DMA mapping failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-31658

ECHO-5D45-E317-F1FC

Affected Products

Altera Tse Driver

Linux Kernel

References · 19

• https://git.kernel.org/stable/c/ae2cd46f57f422b51aedd406ff5d75cbff401d5d · Patch
• https://git.kernel.org/stable/c/3aca300e88afe56afb000cdc4c65383014fb17f9 · Patch
• https://ubuntu.com/security/CVE-2026-31658 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31658 · Security Note
• https://git.kernel.org/stable/c/cb1d318702fdf643061350d164250198df4116f2 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31658 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31658 · Vendor Advisory
• https://git.kernel.org/stable/c/2eb9d67704ca8f1101f7435b85f113ede471f9f2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31658 · Security Note
• https://git.kernel.org/stable/c/6dede3967619b5944003227a5d09fdc21ed57d10 · Patch
• https://git.kernel.org/stable/c/d5ec406f0543bd6cdfd563b08015fdec8c4d5712 · Patch
• https://git.kernel.org/stable/c/60f462cd2716d86bd2174f9d5e035c9278f30480 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31658 · Vendor Advisory
• https://git.kernel.org/stable/c/9f3ec44aeb58501d11834048d5d0dbaeacb6d4e7 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31658 · Vendor Advisory