CVE-2026-80988
CVE CVE-2026-80988EUVD EUVD-2026-76311Published 2026-09-11T19:42:46.000ZLast changed 2026-09-14T11:59:29.000Z
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 ("ntb: Drop packets when qp link is down") meant to make ntb_transport_tx_enqueue() drop packets submitted while the QP link is down, but it only returns 0 without consuming the packet. Zero means success by this function's contract, so ntb_netdev reports NETDEV_TX_OK and forgets the skb: nothing queued it, nothing frees it, and it leaks, one skb for every transmit racing a link-down. Return -ENOLINK instead, restoring the contract that a non-zero return leaves the buffer owned by the caller. With the preceding patch, ntb_netdev frees the skb on non-retryable enqueue failures and returns NETDEV_TX_OK, so a packet racing with link-down is dropped without leaking or entering a busy retry loop.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux patch: 6.1.188; 5.15.132 <5.15.221; 3cfdc448e8bfa8a7eaa5af87f357330566124b78 <76c9ccc0c6bebfc74c0e727eda67687f5103ab06; patch: 6.6.157; 94491412a2afc8a5aea4c5b455aed86d3486f0b1; patch: 6.12.109; 5.4.257 <5.5; patch: 6.18.50; bfa051f650a7708183bd86901ca4645dcf88c486 <96d792c65b9d5f7f9dd86a1004315db59e450c07; c2cd5d993f57f819d46fe62387d3cc34d8468e60; 5.10.195 <5.10.270; 6.1.53 <6.1.188; f195a1a6fe416882984f8bd6c61afc1383171860 <873ce713fef5dde0939220f04f3484ec86a16fba; patch: 5.15.221; patch: 7.2.4; f195a1a6fe416882984f8bd6c61afc1383171860 <894e136b432da75c0352c80299807a5c4b04f167; patch: 5.10.270; f195a1a6fe416882984f8bd6c61afc1383171860 <e6cc541fab01099fd8efadfa4f13afdf118bf536; aa6d6ed213b62cbdb09ea32abbfa085dd987a0c9; patch: 7.3-rc1; f195a1a6fe416882984f8bd6c61afc1383171860 <89177732fe1653bbfef10cf5d99bf20cf57762c2; 6.4.16 <6.5; 4.14.326 <4.15; 4.19.295 <4.20; patch: 0; 6.5.3 <6.6; f195a1a6fe416882984f8bd6c61afc1383171860 <5eca0d899a3be661a7e2caaaa7467a6fa15d756c; 4f4af6b8b7a23fa37decaf43b55403e6bfd8e219 <45cc11035165918dd1f81796ea98f81ece20d361; a8986a61ebee0b54c5d648444fbae09bd1c6dcd2; 6.6; 449b1978d4e50b14b2a4de3a26d0b074593926a3
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.