CVE-2026-80988: NTB: ntb_transport: Fail TX enqueue when the QP link is down

Received
AliasesUBUNTU-CVE-2026-80988DEBIAN-CVE-2026-80988
Published 11-09-2026Last modified 19-10-2026

Vulnerability summary

CVE-2026-80988 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.8% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:11805-1

Timeline

  1. 11-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: NTB: ntb_transport: Fail TX enqueue when the QP link is down Commit f195a1a6fe41 ("ntb: Drop packets when qp link is down") meant to make ntb_transport_tx_enqueue() drop packets submitted while the QP link is down, but it only returns 0 without consuming the packet. Zero means success by this function's contract, so ntb_netdev reports NETDEV_TX_OK and forgets the skb: nothing queued it, nothing frees it, and it leaks, one skb for every transmit racing a link-down. Return -ENOLINK instead, restoring the contract that a non-zero return leaves the buffer owned by the caller. With the preceding patch, ntb_netdev frees the skb on non-retryable enqueue failures and returns NETDEV_TX_OK, so a packet racing with link-down is dropped without leaking or entering a busy retry loop.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

7%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.18% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu165 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linuxAll versions (No fix recorded) | < 6.1.190-1 | < 6.12.111-1 | < 7.2.6-1
  • linux-6.12< 6.12.111-1~deb12u1
Linux1 product
  • linux≥ 3cfdc448e8bfa8a7eaa5af87f357330566124b78, < 76c9ccc0c6bebfc74c0e727eda67687f5103ab06 | ≥ bfa051f650a7708183bd86901ca4645dcf88c486, < 96d792c65b9d5f7f9dd86a1004315db59e450c07 | ≥ 4f4af6b8b7a23fa37decaf43b55403e6bfd8e219, < 45cc11035165918dd1f81796ea98f81ece20d361 | ≥ f195a1a6fe416882984f8bd6c61afc1383171860, < e6cc541fab01099fd8efadfa4f13afdf118bf536 | ≥ f195a1a6fe416882984f8bd6c61afc1383171860, < 5eca0d899a3be661a7e2caaaa7467a6fa15d756c | ≥ f195a1a6fe416882984f8bd6c61afc1383171860, < 894e136b432da75c0352c80299807a5c4b04f167 | ≥ f195a1a6fe416882984f8bd6c61afc1383171860, < 89177732fe1653bbfef10cf5d99bf20cf57762c2 | ≥ f195a1a6fe416882984f8bd6c61afc1383171860, < 873ce713fef5dde0939220f04f3484ec86a16fba | aa6d6ed213b62cbdb09ea32abbfa085dd987a0c9 | a8986a61ebee0b54c5d648444fbae09bd1c6dcd2 | 94491412a2afc8a5aea4c5b455aed86d3486f0b1 | c2cd5d993f57f819d46fe62387d3cc34d8468e60 | 449b1978d4e50b14b2a4de3a26d0b074593926a3 | ≥ 5.10.195, < 5.10.270 | ≥ 5.15.132, < 5.15.221 | ≥ 6.1.53, < 6.1.188 | ≥ 4.14.326, < 4.15 | ≥ 4.19.295, < 4.20 | ≥ 5.4.257, < 5.5 | ≥ 6.4.16, < 6.5 | ≥ 6.5.3, < 6.6 | 6.6

3 vendors · 168 products

References

12 links
Show all 12 references