AZL-72983
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-72983.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-72983
- Upstream
- Published
- 2025-12-23T14:16:40Z
- Modified
- 2026-09-13T06:06:36Z
- Summary
- CVE-2025-68338 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: microchip: Don't free uninitialized ksz_irq
If something goes wrong at setup, ksz_irq_free() can be called on uninitialized ksz_irq (for example when ksz_ptp_irq_setup() fails). It leads to freeing uninitialized IRQ numbers and/or domains.
Use dsa_switch_for_each_user_port_continue_reverse() in the error path to iterate only over the fully initialized ports.
- References