CVE-2026-23453 — Missing Release of Resource after Effective Lifetime in Linux
Severity
5.3MEDIUM
No vectorEPSS
0.0%
top 93.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 3
Description
In the Linux kernel, the following vulnerability has been resolved:
net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode
Page recycling was removed from the XDP_DROP path in emac_run_xdp() to
avoid conflicts with AF_XDP zero-copy mode, which uses xsk_buff_free()
instead.
However, this causes a memory leak when running XDP programs that drop
packets in non-zero-copy mode (standard page pool mode). The pages are
never returned to the page pool, leading to OOM conditions.
F…
Affected Packages2 packages
▶CVEListV5linux/linux7a64bb388df3cf091afdd047c701039a13acd3b4 — d16d57dedcb69c1a1257e0638f8698ce1f0ccbe5+2
🔴Vulnerability Details
3OSV▶
CVE-2026-23453: In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode Page rec↗2026-04-03
GHSA▶
GHSA-h255-j2q2-5hrg: In the Linux kernel, the following vulnerability has been resolved:
net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode
Page r↗2026-04-03