CVE-2026-68333: dpaa2-switch: put MAC endpoint device on disconnect
In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switch: put MAC endpoint device on disconnect
fslmcgetendpoint() returns the MAC endpoint device with a reference taken through devicefindchild(). The switch port connect path stores that device in mac->mcdev and keeps it for the lifetime of the connected MAC object.
However, the disconnect path only closes the MAC and frees the dpaa2mac object. It does not drop the endpoint device reference stored in mac->mcdev, so every successful connect leaks that device reference when the MAC is later disconnected.
Drop the endpoint device reference before freeing the dpaa2mac object.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68333?
CVE-2026-68333 has a severity rating of 7.
How do I fix CVE-2026-68333?
To fix CVE-2026-68333, update the Linux kernel to the latest patch that addresses this vulnerability.
What systems are affected by CVE-2026-68333?
CVE-2026-68333 affects systems using the dpaa2-switch component in the Linux kernel.
What are the potential impacts of CVE-2026-68333?
The potential impacts of CVE-2026-68333 include instability in MAC endpoint device management leading to potential denial-of-service.
When was CVE-2026-68333 published?
CVE-2026-68333 was published on August 10, 2026.