In the Linux kernel, the following vulnerability has been resolved:

dpaa2-eth: put MAC endpoint device on disconnect

fsl_mc_get_endpoint() returns the MAC endpoint device with a reference
taken through device_find_child(). The Ethernet connect path stores that
device in mac->mc_dev and keeps it for the lifetime of the connected MAC
object.

However, the disconnect path only disconnects and closes the MAC before
freeing the dpaa2_mac object. It does not drop the endpoint device
reference stored in mac->mc_dev, so every successful connect leaks that
device reference when the MAC is later disconnected.

Drop the endpoint device reference after closing the MAC and before
freeing the dpaa2_mac object.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
71947923089353f23f4f210864903c4dcf2c1696 affected < 915012e923316b8b5d5bf8fc771617b47bd7572d
71947923089353f23f4f210864903c4dcf2c1696 affected < e23e4a3b9dfd893469c731318d409cdf04fb1ddf
71947923089353f23f4f210864903c4dcf2c1696 affected < f112df0744e2d77baa68eeebb860021bbaaa022a
71947923089353f23f4f210864903c4dcf2c1696 affected < a3cecf169cc652b558d08661bb6ce55e4c933ec0
71947923089353f23f4f210864903c4dcf2c1696 affected < b4b201cc93ff70150853aba03e14d314d1980ca0
Linux Linux affected
Version Status Constraints
5.5 affected —
0 unaffected < 5.5
6.6.148 unaffected ≤ 6.6.*
6.12.101 unaffected ≤ 6.12.*
6.18.42 unaffected ≤ 6.18.*
7.1.6 unaffected ≤ 7.1.*
7.2-rc5 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/915012e923316b8b5d5bf8fc771617b47bd7572d cve-icon
https://git.kernel.org/stable/c/a3cecf169cc652b558d08661bb6ce55e4c933ec0 cve-icon
https://git.kernel.org/stable/c/b4b201cc93ff70150853aba03e14d314d1980ca0 cve-icon
https://git.kernel.org/stable/c/e23e4a3b9dfd893469c731318d409cdf04fb1ddf cve-icon
https://git.kernel.org/stable/c/f112df0744e2d77baa68eeebb860021bbaaa022a cve-icon
History

Mon, 10 Aug 2026 17:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400

Mon, 10 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect fsl_mc_get_endpoint() returns the MAC endpoint device with a reference taken through device_find_child(). The Ethernet connect path stores that device in mac->mc_dev and keeps it for the lifetime of the connected MAC object. However, the disconnect path only disconnects and closes the MAC before freeing the dpaa2_mac object. It does not drop the endpoint device reference stored in mac->mc_dev, so every successful connect leaks that device reference when the MAC is later disconnected. Drop the endpoint device reference after closing the MAC and before freeing the dpaa2_mac object.
Title dpaa2-eth: put MAC endpoint device on disconnect
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-10T12:03:07.529Z

Reserved: 2026-07-30T09:28:09.383Z

Link: CVE-2026-68331

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T17:30:17Z

Weaknesses