Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-74718

devlink: fix net namespace reference leak in reload

Description

In the Linux kernel, the following vulnerability has been resolved: devlink: fix net namespace reference leak in reload devlink_nl_reload_doit() calls devlink_netns_get(), which returns a net with a held reference. When the requested namespace differs from the current one and the reload action is not DRIVER_REINIT, the function returns -EOPNOTSUPP without releasing the reference. Add the missing put_net() on this error path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2edd92570441dd33246210042dc167319a5cf7e3 to < 7b6552e53426ea0539c667bbc5a524fdf7feae6faffected
  • 2edd92570441dd33246210042dc167319a5cf7e3 to < bf0797b92be591ac71d7c0f610e695caca3c72c9affected
  • 2edd92570441dd33246210042dc167319a5cf7e3 to < 7b02c6d2a3cd2cd669f5c16685779f84328ae60caffected
  • 2edd92570441dd33246210042dc167319a5cf7e3 to < eda60c85b4f4c7d66b7141a5fe020b1a7f395341affected
  • 2edd92570441dd33246210042dc167319a5cf7e3 to < 1c4dac9bf1d2ac31da63b794bdec697777cbd0fdaffected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.6.152 to ≤ 6.6.*unaffected
  • 6.12.104 to ≤ 6.12.*unaffected
  • 6.18.45 to ≤ 6.18.*unaffected
  • 7.1.9 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References