-

CVE-2026-97973

net: macb: destroy the phylink instance on the probe error path

In the Linux kernel, the following vulnerability has been resolved:

net: macb: destroy the phylink instance on the probe error path

macb_mii_init() creates a phylink instance on both of its success paths,
but the probe unwind frees the netdev without destroying it, so a failing
macb_alloc_tieoff() or register_netdev() leaks the instance.

Destroy it at err_out_unregister_mdio, which is only reachable once
macb_mii_init() has succeeded, so bp->phylink is valid there.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0
Version < 0112aa02c7847314be599d68783d50c7e228a694
Status affected
Version 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0
Version < c1de1e7b51ab2531f564b39b51998c3d71caccd7
Status affected
Version 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0
Version < 23b6a44ffea1c54a4232aa86ee470b21422a8cc5
Status affected
Version 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0
Version < e92a45b872b035c79acde8dd0da096a72b61ff2f
Status affected
Version 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0
Version < 8558e3195664113c14a4d8fcf221b3caff41fed1
Status affected
Version 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0
Version < 7d059f390750152b9bd69df934198651b94fc26d
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.5
Status affected
Version 0
Version < 5.5
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= 7.2.*
Version 7.2.7
Status unaffected
Version <= *
Version 7.3-rc3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.054
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/23b6a44ffea1c54a4232aa86ee470b21422a8cc5
https://git.kernel.org/stable/c/e92a45b872b035c79acde8dd0da096a72b61ff2f
https://git.kernel.org/stable/c/8558e3195664113c14a4d8fcf221b3caff41fed1
https://git.kernel.org/stable/c/7d059f390750152b9bd69df934198651b94fc26d
https://git.kernel.org/stable/c/0112aa02c7847314be599d68783d50c7e228a694
https://git.kernel.org/stable/c/c1de1e7b51ab2531f564b39b51998c3d71caccd7