In the Linux kernel, the following vulnerability has been resolved:
dpaa2-eth: put MAC endpoint device on disconnect
fslmcgetendpoint() returns the MAC endpoint device with a reference taken through devicefindchild(). The Ethernet connect path stores that device in mac->mcdev and keeps it for the lifetime of the connected MAC object.
However, the disconnect path only disconnects and closes the MAC before freeing the dpaa2mac object. It does not drop the endpoint device reference stored in mac->mcdev, so every successful connect leaks that device reference when the MAC is later disconnected.
Drop the endpoint device reference after closing the MAC and before freeing the dpaa2_mac object.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68331.json",
"cna_assigner": "Linux"
}