SB20260816196 - Improper resource shutdown or release in Linux kernel samsung sxgbe driver

Description

This security bulletin contains information about 1 vulnerability.

1) Improper resource shutdown or release (CVE-ID: CVE-2026-74525)

CWE-ID: CWE-404 - Improper Resource Shutdown or Release

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper resource shutdown or release in init_dma_desc_rings() when handling RX descriptor ring allocation failures. A local user can trigger RX allocation failure during device initialization to cause a denial of service.

The issue results in TX ring resources being leaked when RX ring allocation fails after TX rings were allocated earlier in the same function.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/3563e2486dcd50a751dbcbc1de37e5186646dce6
• https://git.kernel.org/stable/c/42b87cfd9666ef156637c90ff3f6f6dd9a5ad4cb
• https://git.kernel.org/stable/c/b33644a4f6d8f127c62d7b39f24114d3d2499204
• https://git.kernel.org/stable/c/c870f7e2890b9f78ac84515a9809cc5c183c975e
• https://git.kernel.org/stable/c/f2e5bb9fb710553e76a3be9097b448b4e73d8c92