UBUNTU-CVE-2026-97972

In the Linux kernel, the following vulnerability has been resolved: net: macb: put the "mdio" child node reference on success macbmiiinit holds the reference returned by ofgetchildbyname for macbmdiobusregister and drops it only on the error paths, so every successful probe leaks a node reference...

EUVD-2026-86826

In the Linux kernel, the following vulnerability has been resolved: net: macb: put the "mdio" child node reference on success macbmiiinit holds the reference returned by ofgetchildbyname for macbmdiobusregister and drops it only on the error paths, so every successful probe leaks a node reference...

CVE-2026-97972

In the Linux kernel, the following vulnerability has been resolved: net: macb: put the "mdio" child node reference on success macbmiiinit holds the reference returned by ofgetchildbyname for macbmdiobusregister and drops it only on the error paths, so every successful probe leaks a node reference...

CVE-2026-97972

The Linux kernel contains a memory leak vulnerability in the net: macb driver. Specifically, the macb_mii_init() function fails to release the reference returned by of_get_child_by_name() upon a successful registration of the mdio child node, only dropping it on error paths. This causes a node re...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: phy: mdio: fix memory leak Syzbot reported a memory leak in the MDIO bus interface. The problem lay in incorrect state logic. The MDIOBUSALLOCATED state indicates two possible statuses: 1. The bus is only allocated. 2. The bus is...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Do not use devres for mdiobus As explained in the commits: 74b6d7d13307 “net: dsa: realtek: Register the MDIO bus under devres” 5135e96a3dd2 “net: dsa: Do not allocate the slavemiibus using devres” The...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: net: netsec: fixed error handling in netsecregistermdio. If phydeviceregister fails, phydevicefree must be called to reset the reference count; thus, the memory associated with the phy device and its name can be freed in the...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: net: mdio: fixed an undefined behavior in bit shifting for mdiobusregister. Shifting a signed 32-bit value by 31 bits is undefined; therefore, the significant bit was changed to unsigned. The UBSAN warning appears as follows:...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: - net: dsa: felix: do not use devres for mdiobus. As explained in the commits: - 74b6d7d13307: “net: dsa: realtek: register the MDIO bus using devres”. - 5135e96a3dd2: “net: dsa: do not allocate the slavemiibus using devres”...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, for the dsa module, in the mv88e6xxx code path, there was a issue with the refcount leak in the mv88e6xxxmdiosregister function. The ofgetchildbyname function returns a node pointer whose refcount is...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: net: phy: It is now possible to allow the MDIO bus’s PM operations to initiate/stop the state machine for the phylink-controlled PHY. There are two types of DSA drivers: 1. Those that call dsaswitchsuspend and dsaswitchresume...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: net: dsa: Fixed possible memory leaks in dsaloopinit. kmemleak: Reported memory leaks in dsaloopinit: kmemleak: 12 new suspected memory leaks. Unreferenced object 0xffff8880138ce000 size 2048: comm "modprobe", pid 390, jiffies...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: r6040: Fixed the kmemleak in the probe process and removed it. There is a memory leak reported by kmemleak: - Unreferenced object 0xffff888116111000 size 2048: comm “modprobe”, pid 817, jiffies 4294759745 age 76.502s Hex dump...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: mdio: Fixed an unbalanced fwnode reference count in mdiodevicerelease. There is a warning report regarding a refcount leak when probing the mdio device: OF: Error: Memory leak; the expected refcount was 1 instead of 2. The...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: mdio: unexport init-annotated mdiobusinit EXPORTSYMBOL and init are a bad combination because the .init.text section is freed after initialization. As a result, modules cannot use symbols annotated with init. Accessing a fre...

PT-2026-96422

In the Linux kernel, the following vulnerability has been resolved: net: dsa: realtek: use gpiod set value cansleep for reset GPIO rtl83xx reset assert and rtl83xx reset deassert are only called from the probe path, which may sleep and is not timing-critical. When the reset GPIO is provided by a...

OESA-2026-3703 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values introduced in commit 5f78e1fb7a3e "ASoC: qcom: Add driver support for audioreach solution" cau...

The vulnerability of the `bcma_mdio_mii_register()` function in the `drivers/net/ethernet/broadcom/bgmac-bcma-mdio.c` driver code of the Linux kernel’s Ethernet adapter support module allows a hacker to cause a service failure.

The vulnerability of the bcmamdiomiiregister function in the drivers/net/ethernet/broadcom/bgmac-bcma-mdio.c driver for supporting Ethernet network adapters in the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, for the dsa interface, in the mxl862xx module, there was a issue where the DSA ports were freed after they had been used. Upon a MDIO CRC error, the mxl862xxcrcerrworkfn function iterates through the DSA por...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: In the net: phy: sfp section, there was a issue where the sfpi2cmdiobusdestroy function failed to properly free the bus. The sfpi2cmdiobuscreate function allocates the I2C MDIO bus using mdioi2calloc, a straightforward allocation...