CVE-2026-68331: dpaa2-eth: put MAC endpoint device on disconnect
In the Linux kernel, the following vulnerability has been resolved:
dpaa2-eth: put MAC endpoint device on disconnect
fslmcgetendpoint() returns the MAC endpoint device with a reference taken through devicefindchild(). The Ethernet connect path stores that device in mac->mcdev and keeps it for the lifetime of the connected MAC object.
However, the disconnect path only disconnects and closes the MAC before freeing the dpaa2mac object. It does not drop the endpoint device reference stored in mac->mcdev, so every successful connect leaks that device reference when the MAC is later disconnected.
Drop the endpoint device reference after closing the MAC and before freeing the dpaa2mac object.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68331?
CVE-2026-68331 has a severity rating of 8, indicating high risk.
How do I fix CVE-2026-68331?
To fix CVE-2026-68331, ensure you update the Linux kernel to the latest patched version.
What systems are affected by CVE-2026-68331?
CVE-2026-68331 affects systems running a vulnerable version of the Linux kernel with dpaa2-eth drivers.
What does CVE-2026-68331 exploit?
CVE-2026-68331 exploits an issue related to MAC endpoint device management in the Linux kernel.
When was CVE-2026-68331 published?
CVE-2026-68331 was published on August 10, 2026.