CVE-2026-68331

Source
https://cve.org/CVERecord?id=CVE-2026-68331
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68331.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-68331
Downstream
Published
2026-08-10T12:03:07.529Z
Modified
2026-08-12T04:19:22.648299033Z
Summary
dpaa2-eth: put MAC endpoint device on disconnect
Details

In the Linux kernel, the following vulnerability has been resolved:

dpaa2-eth: put MAC endpoint device on disconnect

fslmcgetendpoint() returns the MAC endpoint device with a reference taken through devicefindchild(). The Ethernet connect path stores that device in mac->mcdev and keeps it for the lifetime of the connected MAC object.

However, the disconnect path only disconnects and closes the MAC before freeing the dpaa2mac object. It does not drop the endpoint device reference stored in mac->mcdev, so every successful connect leaks that device reference when the MAC is later disconnected.

Drop the endpoint device reference after closing the MAC and before freeing the dpaa2_mac object.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68331.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
71947923089353f23f4f210864903c4dcf2c1696
Fixed
915012e923316b8b5d5bf8fc771617b47bd7572d
Fixed
e23e4a3b9dfd893469c731318d409cdf04fb1ddf
Fixed
f112df0744e2d77baa68eeebb860021bbaaa022a
Fixed
a3cecf169cc652b558d08661bb6ce55e4c933ec0
Fixed
b4b201cc93ff70150853aba03e14d314d1980ca0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68331.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
6.6.148
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.101
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.42
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.6

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-68331.json"