In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switch: put MAC endpoint device on disconnect
fslmcgetendpoint() returns the MAC endpoint device with a reference taken through devicefindchild(). The switch port connect path stores that device in mac->mcdev and keeps it for the lifetime of the connected MAC object.
However, the disconnect path only closes the MAC and frees the dpaa2mac object. It does not drop the endpoint device reference stored in mac->mcdev, so every successful connect leaks that device reference when the MAC is later disconnected.
Drop the endpoint device reference before freeing the dpaa2_mac object.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68333.json",
"cna_assigner": "Linux"
}