CVE-2026-68331

dpaa2-eth: put MAC endpoint device on disconnect

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dpaa2-eth: put MAC endpoint device on disconnect

fsl_mc_get_endpoint() returns the MAC endpoint device with a reference taken through device_find_child(). The Ethernet connect path stores that device in mac->mc_dev and keeps it for the lifetime of the connected MAC object.

However, the disconnect path only disconnects and closes the MAC before freeing the dpaa2_mac object. It does not drop the endpoint device reference stored in mac->mc_dev, so every successful connect leaks that device reference when the MAC is later disconnected.

Drop the endpoint device reference after closing the MAC and before freeing the dpaa2_mac object.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	71947923089353f23f4f210864903c4dcf2c1696 to before 6b6ffdb9ca4547a3c4c274aa3e25b6c68dbc62e1Affected 71947923089353f23f4f210864903c4dcf2c1696 to before 1974127776da46a000c61f36d4946799ea6d4f51Affected 71947923089353f23f4f210864903c4dcf2c1696 to before 915012e923316b8b5d5bf8fc771617b47bd7572dAffected 71947923089353f23f4f210864903c4dcf2c1696 to before e23e4a3b9dfd893469c731318d409cdf04fb1ddfAffected 71947923089353f23f4f210864903c4dcf2c1696 to before f112df0744e2d77baa68eeebb860021bbaaa022aAffected 71947923089353f23f4f210864903c4dcf2c1696 to before a3cecf169cc652b558d08661bb6ce55e4c933ec0Affected 71947923089353f23f4f210864903c4dcf2c1696 to before b4b201cc93ff70150853aba03e14d314d1980ca0Affected
LinuxLinux	5.5Affected before 5.5Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

71947923089353f23f4f210864903c4dcf2c1696 to before 6b6ffdb9ca4547a3c4c274aa3e25b6c68dbc62e1Affected
71947923089353f23f4f210864903c4dcf2c1696 to before 1974127776da46a000c61f36d4946799ea6d4f51Affected
71947923089353f23f4f210864903c4dcf2c1696 to before 915012e923316b8b5d5bf8fc771617b47bd7572dAffected
71947923089353f23f4f210864903c4dcf2c1696 to before e23e4a3b9dfd893469c731318d409cdf04fb1ddfAffected
71947923089353f23f4f210864903c4dcf2c1696 to before f112df0744e2d77baa68eeebb860021bbaaa022aAffected
71947923089353f23f4f210864903c4dcf2c1696 to before a3cecf169cc652b558d08661bb6ce55e4c933ec0Affected
71947923089353f23f4f210864903c4dcf2c1696 to before b4b201cc93ff70150853aba03e14d314d1980ca0Affected

LinuxLinux

5.5Affected
before 5.5Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.