Answer in brief
CVE-2026-99047 records a Unknown severity vulnerability in gve: fix XSK buffer leak when rings are stopped. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c1fffc5d66a7147d557736c2341a511e0896d9ff <506f9de069d07a72b9887ce3edd2fdf32f4953aa || >=c1fffc5d66a7147d557736c2341a511e0896d9ff <7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7 || >=c1fffc5d66a7147d557736c2341a511e0896d9ff <73670ddb91a4d22e1deb3efd962242de1ec48e90 | 506f9de069d07a72b9887ce3edd2fdf32f4953aa, 7a7e6bbbf0586c1f62f0cc7d9a2877d8a5e5aaf7, 73670ddb91a4d22e1deb3efd962242de1ec48e90 |
| Linux/Linuxgeneric | 6.17 | Not reported |
Published upstream
Oct 23, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 23, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 23, 2026
In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a part of stopping queues. This causes all XSK buffers which are posted to the NIC to be leaked. Free XSK buffers attached to an allocated buf_state when stopping rings. This issue was hit in production.
Quoted source text, attributed separately from HOL analysis.