HomeDefectsLIN1023-23524
Fixed

LIN1023-23524 : Security Advisory - linux - CVE-2026-31737

Created: May 12, 2026    Updated: May 14, 2026
Resolved Date: May 12, 2026
Found In Version: 10.23.30.2
Fix Version: 10.23.30.21
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  net: ftgmac100: fix ring allocation unwind on open failure  ftgmac100_alloc_rings() allocates rx_skbs, tx_skbs, rxdes, txdes, and rx_scratch in stages. On intermediate failures it returned -ENOMEM directly, leaking resources allocated earlier in the function.  Rework the failure path to use staged local unwind labels and free allocated resources in reverse order before returning -ENOMEM. This matches common netdev allocation cleanup style.

CVEs