CVE-2026-97973

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macb_mii_init() creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macb_alloc_tieoff() or register_netdev() leaks the instance. Destroy it at err_out_unregister_mdio, which is only reachable once macb_mii_init() has succeeded, so bp->phylink is valid there.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 25, 2026
First seenSep 25, 2026

How to fix

Update
  • Linux Linux0112aa02c7847314be599d68783d50c7e228a694, c1de1e7b51ab2531f564b39b51998c3d71caccd7, 23b6a44ffea1c54a4232aa86ee470b21422a8cc5, e92a45b872b035c79acde8dd0da096a72b61ff2f, 8558e3195664113c14a4d8fcf221b3caff41fed1, 7d059f390750152b9bd69df934198651b94fc26d or later

Affected products

ProductAffected versionsFixed in
Linux Linux7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < 0112aa02c7847314be599d68783d50c7e228a694, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < c1de1e7b51ab2531f564b39b51998c3d71caccd7, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < 23b6a44ffea1c54a4232aa86ee470b21422a8cc5, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < e92a45b872b035c79acde8dd0da096a72b61ff2f, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < 8558e3195664113c14a4d8fcf221b3caff41fed1, 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 ≤ v < 7d059f390750152b9bd69df934198651b94fc26d, 5.50112aa02c7847314be599d68783d50c7e228a694, c1de1e7b51ab2531f564b39b51998c3d71caccd7, 23b6a44ffea1c54a4232aa86ee470b21422a8cc5, e92a45b872b035c79acde8dd0da096a72b61ff2f, 8558e3195664113c14a4d8fcf221b3caff41fed1, 7d059f390750152b9bd69df934198651b94fc26d

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.