https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 13:40:17 +0000 https://vulnerability.circl.lu/vuln/cve-2026-46102 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: strparser: fix skb_head leak in strp_abort_strp()</p> <p>When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp-&gt;skb_head.</p> <p>That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory.</p> <p>Fix this by freeing strp-&gt;skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: strparser: fix skb_head leak in strp_abort_strp()</p> <p>When the stream parser is aborted, for example after a message assembly timeout, it can still hold a reference to a partially assembled message in strp-&gt;skb_head.</p> <p>That skb is not released in strp_abort_strp(), which leaks the partially assembled message and can be triggered repeatedly to exhaust memory.</p> <p>Fix this by freeing strp-&gt;skb_head and resetting the parser state in the abort path. Leave strp_stop() unchanged so final cleanup still happens in strp_done() after the work and timer have been synchronized.</p> https://vulnerability.circl.lu/vuln/cve-2026-46102