CVE-2026-97973
Description
In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macb_mii_init() creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macb_alloc_tieoff() or register_netdev() leaks the instance. Destroy it at err_out_unregister_mdio, which is only reachable once macb_mii_init() has succeeded, so bp->phylink is valid there.
How to fix
- Linux Linux0112aa02c7847314be599d68783d50c7e228a694, c1de1e7b51ab2531f564b39b51998c3d71caccd7, 23b6a44ffea1c54a4232aa86ee470b21422a8cc5, e92a45b872b035c79acde8dd0da096a72b61ff2f, 8558e3195664113c14a4d8fcf221b3caff41fed1, 7d059f390750152b9bd69df934198651b94fc26d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < 0112aa02c7847314be599d68783d50c7e228a694, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < c1de1e7b51ab2531f564b39b51998c3d71caccd7, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < 23b6a44ffea1c54a4232aa86ee470b21422a8cc5, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < e92a45b872b035c79acde8dd0da096a72b61ff2f, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < 8558e3195664113c14a4d8fcf221b3caff41fed1, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < 7d059f390750152b9bd69df934198651b94fc26d, 5.5 | 0112aa02c7847314be599d68783d50c7e228a694, c1de1e7b51ab2531f564b39b51998c3d71caccd7, 23b6a44ffea1c54a4232aa86ee470b21422a8cc5, e92a45b872b035c79acde8dd0da096a72b61ff2f, 8558e3195664113c14a4d8fcf221b3caff41fed1, 7d059f390750152b9bd69df934198651b94fc26d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.