CVE-2026-68331

In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect fsl_mc_get_endpoint() returns the MAC endpoint device with a reference taken through device_find_child(). The Ethernet connect path stores that device in mac->mc_dev and keeps it for the lifetime of the connected MAC object. However, the disconnect path only disconnects and closes the MAC before freeing the dpaa2_mac object. It does not drop the endpoint device reference stored in mac->mc_dev, so every successful connect leaks that device reference when the MAC is later disconnected. Drop the endpoint device reference after closing the MAC and before freeing the dpaa2_mac object.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/1974127776da46a000c61f36d4946799ea6d4f51
https://git.kernel.org/stable/c/6b6ffdb9ca4547a3c4c274aa3e25b6c68dbc62e1
https://git.kernel.org/stable/c/915012e923316b8b5d5bf8fc771617b47bd7572d
https://git.kernel.org/stable/c/a3cecf169cc652b558d08661bb6ce55e4c933ec0
https://git.kernel.org/stable/c/b4b201cc93ff70150853aba03e14d314d1980ca0
https://git.kernel.org/stable/c/e23e4a3b9dfd893469c731318d409cdf04fb1ddf
https://git.kernel.org/stable/c/f112df0744e2d77baa68eeebb860021bbaaa022a

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-10 13:20

Updated : 2026-08-19 17:20

NVD link : CVE-2026-68331

Mitre link : CVE-2026-68331

CVE.ORG link : CVE-2026-68331

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-68331", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "71947923089353f23f4f210864903c4dcf2c1696", "lessThan": "6b6ffdb9ca4547a3c4c274aa3e25b6c68dbc62e1", "versionType": "git"}, {"status": "affected", "version": "71947923089353f23f4f210864903c4dcf2c1696", "lessThan": "1974127776da46a000c61f36d4946799ea6d4f51", "versionType": "git"}, {"status": "affected", "version": "71947923089353f23f4f210864903c4dcf2c1696", "lessThan": "915012e923316b8b5d5bf8fc771617b47bd7572d", "versionType": "git"}, {"status": "affected", "version": "71947923089353f23f4f210864903c4dcf2c1696", "lessThan": "e23e4a3b9dfd893469c731318d409cdf04fb1ddf", "versionType": "git"}, {"status": "affected", "version": "71947923089353f23f4f210864903c4dcf2c1696", "lessThan": "f112df0744e2d77baa68eeebb860021bbaaa022a", "versionType": "git"}, {"status": "affected", "version": "71947923089353f23f4f210864903c4dcf2c1696", "lessThan": "a3cecf169cc652b558d08661bb6ce55e4c933ec0", "versionType": "git"}, {"status": "affected", "version": "71947923089353f23f4f210864903c4dcf2c1696", "lessThan": "b4b201cc93ff70150853aba03e14d314d1980ca0", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.5"}, {"status": "unaffected", "version": "0", "lessThan": "5.5", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.216", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.183", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.148", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.101", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.42", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.6", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c"], "defaultStatus": "affected"}]}], "published": "2026-08-10T13:20:23.410", "references": [{"url": "https://git.kernel.org/stable/c/1974127776da46a000c61f36d4946799ea6d4f51", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6b6ffdb9ca4547a3c4c274aa3e25b6c68dbc62e1", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/915012e923316b8b5d5bf8fc771617b47bd7572d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a3cecf169cc652b558d08661bb6ce55e4c933ec0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b4b201cc93ff70150853aba03e14d314d1980ca0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e23e4a3b9dfd893469c731318d409cdf04fb1ddf", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f112df0744e2d77baa68eeebb860021bbaaa022a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-eth: put MAC endpoint device on disconnect\n\nfsl_mc_get_endpoint() returns the MAC endpoint device with a reference\ntaken through device_find_child(). The Ethernet connect path stores that\ndevice in mac->mc_dev and keeps it for the lifetime of the connected MAC\nobject.\n\nHowever, the disconnect path only disconnects and closes the MAC before\nfreeing the dpaa2_mac object. It does not drop the endpoint device\nreference stored in mac->mc_dev, so every successful connect leaks that\ndevice reference when the MAC is later disconnected.\n\nDrop the endpoint device reference after closing the MAC and before\nfreeing the dpaa2_mac object."}], "lastModified": "2026-08-19T17:20:43.260", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}