CVE-2026-68331

dpaa2-eth: put MAC endpoint device on disconnect

N/A
Published: August 10, 2026 at 12:03 PM UTC
Updated: August 19, 2026 at 05:20 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect fsl_mc_get_endpoint() returns the MAC endpoint device with a reference taken through device_find_child(). The Ethernet connect path stores that device in mac->mc_dev and keeps it for the lifetime of the connected MAC object. However, the disconnect path only disconnects and closes the MAC before freeing the dpaa2_mac object. It does not drop the endpoint device reference stored in mac->mc_dev, so every successful connect leaks that device reference when the MAC is later disconnected. Drop the endpoint device reference after closing the MAC and before freeing the dpaa2_mac object.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.5 ≤ v < 5.15.2165.5 ≤ v < 6.1.1835.5 ≤ v < 6.12.1015.5 ≤ v < 6.18.425.5 ≤ v < 6.6.1485.5 ≤ v < 7.1.65.5 ≤ v < 7.25.571947923089353f23f4f210864903c4dcf2c1696
Vendor states this is fixed in 1974127776da46a000c61f36d4946799ea6d4f51 (fixed)
Vendor states this is fixed in 6b6ffdb9ca4547a3c4c274aa3e25b6c68dbc62e1 (fixed)
Vendor states this is fixed in 915012e923316b8b5d5bf8fc771617b47bd7572d (fixed)
Vendor states this is fixed in a3cecf169cc652b558d08661bb6ce55e4c933ec0 (fixed)
Vendor states this is fixed in b4b201cc93ff70150853aba03e14d314d1980ca0 (fixed)
Vendor states this is fixed in e23e4a3b9dfd893469c731318d409cdf04fb1ddf (fixed)
Vendor states this is fixed in f112df0744e2d77baa68eeebb860021bbaaa022a (fixed)
Vendor states this is fixed in 5.15.216 (unaffected)
Vendor states this is fixed in 5.5 (unaffected)
Vendor states this is fixed in 6.1.183 (unaffected)
Vendor states this is fixed in 6.12.101 (unaffected)
Vendor states this is fixed in 6.18.42 (unaffected)
Vendor states this is fixed in 6.6.148 (unaffected)
Vendor states this is fixed in 7.1.6 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card