AZL-72983
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-72983.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-72983
- Upstream
- Published
- 2025-12-23T14:16:40Z
- Modified
- 2026-04-01T05:22:14.465578Z
- Summary
- CVE-2025-68338 affecting package kernel 6.6.126.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net: dsa: microchip: Don't free uninitialized ksz_irq
If something goes wrong at setup, kszirqfree() can be called on uninitialized kszirq (for example when kszptpirqsetup() fails). It leads to freeing uninitialized IRQ numbers and/or domains.
Use dsaswitchforeachuserportcontinue_reverse() in the error path to iterate only over the fully initialized ports.
- References