CVE-2026-68333
Description
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fsl_mc_get_endpoint() returns the MAC endpoint device with a reference taken through device_find_child(). The switch port connect path stores that device in mac->mc_dev and keeps it for the lifetime of the connected MAC object. However, the disconnect path only closes the MAC and frees the dpaa2_mac object. It does not drop the endpoint device reference stored in mac->mc_dev, so every successful connect leaks that device reference when the MAC is later disconnected. Drop the endpoint device reference before freeing the dpaa2_mac object.
How to fix
- Linux Linux196f7301537814bef0f5915f87cd73d6d1235c19, 0e9a6811eb6198ab17538cd01fa155d133b238ed, 1f4ca61b7a93de3dfa5161bcd38ecb99bb091c38, 680eecc850d36a280df9780496bc603fec17b2d6, 26ac2d3602347f0377fbcd5214bc28a9d735ae68, c27694ff6748e08fcd2fdba89018439d75b8198f, 4c1eabbef7a1707635652e956e39db1269c3af2b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 84cba72956fddf29ba666f885c39ed147024c125 ≤ v < 196f7301537814bef0f5915f87cd73d6d1235c19, 84cba72956fddf29ba666f885c39ed147024c125 ≤ v < 0e9a6811eb6198ab17538cd01fa155d133b238ed, 84cba72956fddf29ba666f885c39ed147024c125 ≤ v < 1f4ca61b7a93de3dfa5161bcd38ecb99bb091c38, 84cba72956fddf29ba666f885c39ed147024c125 ≤ v < 680eecc850d36a280df9780496bc603fec17b2d6, 84cba72956fddf29ba666f885c39ed147024c125 ≤ v < 26ac2d3602347f0377fbcd5214bc28a9d735ae68, 84cba72956fddf29ba666f885c39ed147024c125 ≤ v < c27694ff6748e08fcd2fdba89018439d75b8198f, 84cba72956fddf29ba666f885c39ed147024c125 ≤ v < 4c1eabbef7a1707635652e956e39db1269c3af2b, 5.15 | 196f7301537814bef0f5915f87cd73d6d1235c19, 0e9a6811eb6198ab17538cd01fa155d133b238ed, 1f4ca61b7a93de3dfa5161bcd38ecb99bb091c38, 680eecc850d36a280df9780496bc603fec17b2d6, 26ac2d3602347f0377fbcd5214bc28a9d735ae68, c27694ff6748e08fcd2fdba89018439d75b8198f, 4c1eabbef7a1707635652e956e39db1269c3af2b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.