CVE-2026-97972
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: net: macb: put the "mdio" child node reference on success macb_mii_init() holds the reference returned by of_get_child_by_name() for macb_mdiobus_register() and drops it only on the error paths, so every successful probe leaks a node reference. On a CM5, overlay removal after four bind cycles reports OF: ERROR: memory leak, expected refcount 1 instead of 5 Drop the reference after registration, where __mdiobus_register() has already taken its own for the lifetime of the bus.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 25, 2026
First seenSep 25, 2026
How to fix
Update
- Linux Linux5fba30080d298edb742396073372385c961578d3, 7d60dc7ff85b73a2119d582ca2d4456b30960380, 382a373d9ea7a6ac4de9c022385b6217f65ae3cc or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 8a6631f1cece09047fa44608d21d520ca65ce7d8 ≤ v < 5fba30080d298edb742396073372385c961578d3, 8a6631f1cece09047fa44608d21d520ca65ce7d8 ≤ v < 7d60dc7ff85b73a2119d582ca2d4456b30960380, 8a6631f1cece09047fa44608d21d520ca65ce7d8 ≤ v < 382a373d9ea7a6ac4de9c022385b6217f65ae3cc, 6.13 | 5fba30080d298edb742396073372385c961578d3, 7d60dc7ff85b73a2119d582ca2d4456b30960380, 382a373d9ea7a6ac4de9c022385b6217f65ae3cc |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.