CVE-2026-68331

Source
https://cve.org/CVERecord?id=CVE-2026-68331
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68331.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-68331
Downstream
Published
2026-08-10T12:03:07Z
Modified
2026-08-21T03:30:21Z
Summary
dpaa2-eth: put MAC endpoint device on disconnect
Details

In the Linux kernel, the following vulnerability has been resolved:

dpaa2-eth: put MAC endpoint device on disconnect

fsl_mc_get_endpoint() returns the MAC endpoint device with a reference taken through device_find_child(). The Ethernet connect path stores that device in mac->mc_dev and keeps it for the lifetime of the connected MAC object.

However, the disconnect path only disconnects and closes the MAC before freeing the dpaa2_mac object. It does not drop the endpoint device reference stored in mac->mc_dev, so every successful connect leaks that device reference when the MAC is later disconnected.

Drop the endpoint device reference after closing the MAC and before freeing the dpaa2_mac object.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68331.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
71947923089353f23f4f210864903c4dcf2c1696
Fixed
6b6ffdb9ca4547a3c4c274aa3e25b6c68dbc62e1
Fixed
1974127776da46a000c61f36d4946799ea6d4f51
Fixed
915012e923316b8b5d5bf8fc771617b47bd7572d
Fixed
e23e4a3b9dfd893469c731318d409cdf04fb1ddf
Fixed
f112df0744e2d77baa68eeebb860021bbaaa022a
Fixed
a3cecf169cc652b558d08661bb6ce55e4c933ec0
Fixed
b4b201cc93ff70150853aba03e14d314d1980ca0

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68331.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.15.216
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.183
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.148
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.101
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.42
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-68331.json"