CVE-2026-74678

net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

CVE-2026-74678 is fixed in 47 products on 1 platform, first by DEBIAN-CVE-2026-74678, released August 27, 2026. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0048
41st percentile

In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() When the interface has NETIF_F_SG enabled and skb_linearize() fails in ax88179_tx_fixup(), the function returns NULL without freeing the skb. usbnet_start_xmit() treats a NULL return from tx_fixup() as a drop (info->flags does not set FLAG_MULTI_PACKET for this driver), jumping to the "drop" label where it does `if (skb) dev_kfree_skb_any(skb)`. Because tx_fixup() returned NULL, the local skb variable in usbnet_start_xmit() is NULL, so the original skb is never freed — a memory leak on every TX frame whose linearization fails (i.e. under memory pressure). Free the skb before returning, matching the error handling already used for the pskb_expand_head() failure path in the same function.

Where it's fixed

ProductFixed inFixReleased
Linux
kernel-64kb · sles 15.7 6.4.0-150700.53.90.1 SUSE-SU-2026:5091-1 Nov 7, 2026
kernel-azure · sles 15.7 6.4.0-150700.53.90.1 SUSE-SU-2026:5091-1 Nov 7, 2026
kernel-default · sles 15.7 6.4.0-150700.53.90.1 SUSE-SU-2026:5091-1 Nov 7, 2026
kernel-default-base · sles 15.7 6.4.0-150700.53.90.1.150700.17.51.1 SUSE-SU-2026:5091-1 Nov 7, 2026
kernel-docs · sles 15.7 6.4.0-150700.53.90.1 SUSE-SU-2026:5091-1 Nov 7, 2026
kernel-livepatch-SLE15-SP7_Update_24 · sles 15.7 1-150700.15.3.1 SUSE-SU-2026:5091-1 Nov 7, 2026
kernel-obs-build · sles 15.7 6.4.0-150700.53.90.1 SUSE-SU-2026:5091-1 Nov 7, 2026
kernel-source · sles 15.7 6.4.0-150700.53.90.1 SUSE-SU-2026:5091-1 Nov 7, 2026
kernel-syms · sles 15.7 6.4.0-150700.53.90.1 SUSE-SU-2026:5091-1 Nov 7, 2026
kernel-uek · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-devel · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-devel · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-deprecated · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-deprecated · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-desktop · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-desktop · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-extra · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-extra · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-extra-netfilter · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-extra-netfilter · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-usb · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-usb · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-wireless · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-debug-modules-wireless · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-devel · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-devel · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-doc · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-doc · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-deprecated · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-deprecated · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-desktop · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-desktop · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-extra · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-extra · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-extra-netfilter · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-extra-netfilter · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-usb · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-usb · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-wireless · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-modules-wireless · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-tools · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek-tools · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-devel · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-devel · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-core · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-core · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-deprecated · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-deprecated · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-desktop · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-desktop · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-extra · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-extra · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-extra-netfilter · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-extra-netfilter · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-usb · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-usb · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-wireless · ol 10 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-uek64k-modules-wireless · ol 9 0:6.12.0-206.104.3.3.el9uek ELSA-2026-500248 Sep 4, 2026
kernel-zfcpdump · sles 15.7 6.4.0-150700.53.90.1 SUSE-SU-2026:5091-1 Nov 7, 2026
linux · Debian 12.15 (bookworm) 6.1.187-1 DEBIAN-CVE-2026-74678 Aug 27, 2026
linux · Debian 13.5 (trixie) 6.12.105-1 DEBIAN-CVE-2026-74678 Aug 27, 2026
linux · Debian 14 7.1.9-1 DEBIAN-CVE-2026-74678 Aug 27, 2026
linux-6.12 · Debian 12.15 (bookworm) 6.12.107-1~deb12u1 DEBIAN-CVE-2026-74678 Aug 27, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.