All vulnerabilities
CVE-2026-97973

Linux: net: macb: destroy the phylink instance on the probe error path

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 6% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in0112aa02c7847314be599d68783d50c7e228a694Also 23b6a44ffea1c54a4232aa86ee470b21422a8cc5, 8558e3195664113c14a4d8fcf221b3caff41fed1 and 1 moreCVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 0112aa02c7847314be599d68783d50c7e228a694LinuxCVE List
  • 23b6a44ffea1c54a4232aa86ee470b21422a8cc5LinuxCVE List
  • 8558e3195664113c14a4d8fcf221b3caff41fed1LinuxCVE List
  • 7d059f390750152b9bd69df934198651b94fc26dLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

net: macb: destroy the phylink instance on the probe error path

macb_mii_init() creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macb_alloc_tieoff() or register_netdev() leaks the instance.

Destroy it at err_out_unregister_mdio, which is only reachable once macb_mii_init() has succeeded, so bp->phylink is valid there.

Text from CVE List

Affected versions 14

  • Linuxaffected: 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 before 0112aa02c7847314be599d68783d50c7e228a694CVE List
  • Linuxaffected: 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 before c1de1e7b51ab2531f564b39b51998c3d71caccd7CVE List
  • Linuxaffected: 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 before 23b6a44ffea1c54a4232aa86ee470b21422a8cc5CVE List
  • Linuxaffected: 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 before e92a45b872b035c79acde8dd0da096a72b61ff2fCVE List
  • Linuxaffected: 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 before 8558e3195664113c14a4d8fcf221b3caff41fed1CVE List
  • Linuxaffected: 7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0 before 7d059f390750152b9bd69df934198651b94fc26dCVE List
  • Linuxaffected: 5.5CVE List
  • Linuxunaffected: all versions before 5.5CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 6