CVE-2026-68321 net: txgbe: fix FDIR filter leak on remove
A memory leak in the txgbe network driver allows local attackers to cause denial of service by exhausting kernel memory during device removal.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-68321?
CVE-2026-68321 is a memory corruption vulnerability in Linux, published on 10 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: txgbe: fix FDIR filter leak on remove
Perfect FDIR filters can be added while the interface is down and are kept on the software list for later restore. unregister_netdev() only calls ndo_stop when the device is up, so txgbe_fdir_filter_exit() in txgbe_close() is skipped in that case and the filters are leaked on driver remove. Free the filter list from txgbe_remove() as well.
Which versions are affected by CVE-2026-68321?
How do I fix CVE-2026-68321?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-68321 being exploited?
There is no known exploitation of CVE-2026-68321 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-68321, DEBIAN-CVE-2026-68321, GHSA-8f8h-f232-g757, UBUNTU-CVE-2026-68321.