CVE-2026-68333

dpaa2-switch: put MAC endpoint device on disconnect

State: Published
Severity: Not scored
Published: Aug 10, 2026
Updated: Aug 19, 2026
Reserved: Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dpaa2-switch: put MAC endpoint device on disconnect

fsl_mc_get_endpoint() returns the MAC endpoint device with a reference taken through device_find_child(). The switch port connect path stores that device in mac->mc_dev and keeps it for the lifetime of the connected MAC object.

However, the disconnect path only closes the MAC and frees the dpaa2_mac object. It does not drop the endpoint device reference stored in mac->mc_dev, so every successful connect leaks that device reference when the MAC is later disconnected.

Drop the endpoint device reference before freeing the dpaa2_mac object.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	84cba72956fddf29ba666f885c39ed147024c125 to before 196f7301537814bef0f5915f87cd73d6d1235c19Affected 84cba72956fddf29ba666f885c39ed147024c125 to before 0e9a6811eb6198ab17538cd01fa155d133b238edAffected 84cba72956fddf29ba666f885c39ed147024c125 to before 1f4ca61b7a93de3dfa5161bcd38ecb99bb091c38Affected 84cba72956fddf29ba666f885c39ed147024c125 to before 680eecc850d36a280df9780496bc603fec17b2d6Affected 84cba72956fddf29ba666f885c39ed147024c125 to before 26ac2d3602347f0377fbcd5214bc28a9d735ae68Affected 84cba72956fddf29ba666f885c39ed147024c125 to before c27694ff6748e08fcd2fdba89018439d75b8198fAffected 84cba72956fddf29ba666f885c39ed147024c125 to before 4c1eabbef7a1707635652e956e39db1269c3af2bAffected
LinuxLinux	5.15Affected before 5.15Not affected 5.15.216 through 5.15.Not affected 6.1.183 through 6.1.Not affected 6.6.148 through 6.6.Not affected 6.12.101 through 6.12.Not affected 6.18.42 through 6.18.Not affected 7.1.6 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

84cba72956fddf29ba666f885c39ed147024c125 to before 196f7301537814bef0f5915f87cd73d6d1235c19Affected
84cba72956fddf29ba666f885c39ed147024c125 to before 0e9a6811eb6198ab17538cd01fa155d133b238edAffected
84cba72956fddf29ba666f885c39ed147024c125 to before 1f4ca61b7a93de3dfa5161bcd38ecb99bb091c38Affected
84cba72956fddf29ba666f885c39ed147024c125 to before 680eecc850d36a280df9780496bc603fec17b2d6Affected
84cba72956fddf29ba666f885c39ed147024c125 to before 26ac2d3602347f0377fbcd5214bc28a9d735ae68Affected
84cba72956fddf29ba666f885c39ed147024c125 to before c27694ff6748e08fcd2fdba89018439d75b8198fAffected
84cba72956fddf29ba666f885c39ed147024c125 to before 4c1eabbef7a1707635652e956e39db1269c3af2bAffected

LinuxLinux

5.15Affected
before 5.15Not affected
5.15.216 through 5.15.*Not affected
6.1.183 through 6.1.*Not affected
6.6.148 through 6.6.*Not affected
6.12.101 through 6.12.*Not affected
6.18.42 through 6.18.*Not affected
7.1.6 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.