{"id":"CVE-2026-97973","state":"PUBLISHED","title":"net: macb: destroy the phylink instance on the probe error path","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: destroy the phylink instance on the probe error path\n\nmacb_mii_init() creates a phylink instance on both of its success paths,\nbut the probe unwind frees the netdev without destroying it, so a failing\nmacb_alloc_tieoff() or register_netdev() leaks the instance.\n\nDestroy it at err_out_unregister_mdio, which is only reachable once\nmacb_mii_init() has succeeded, so bp->phylink is valid there.","publishedAt":"2026-09-25T10:23:12.759Z","updatedAt":"2026-10-19T09:11:39.063Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"0112aa02c7847314be599d68783d50c7e228a694","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"c1de1e7b51ab2531f564b39b51998c3d71caccd7","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"23b6a44ffea1c54a4232aa86ee470b21422a8cc5","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"e92a45b872b035c79acde8dd0da096a72b61ff2f","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"8558e3195664113c14a4d8fcf221b3caff41fed1","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"7d059f390750152b9bd69df934198651b94fc26d","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/ethernet/cadence/macb_main.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.5","versionType":"semver"},{"version":"6.1.189","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.158","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.111","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.53","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.7","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/ethernet/cadence/macb_main.c"]}],"references":["https://git.kernel.org/stable/c/0112aa02c7847314be599d68783d50c7e228a694","https://git.kernel.org/stable/c/c1de1e7b51ab2531f564b39b51998c3d71caccd7","https://git.kernel.org/stable/c/23b6a44ffea1c54a4232aa86ee470b21422a8cc5","https://git.kernel.org/stable/c/e92a45b872b035c79acde8dd0da096a72b61ff2f","https://git.kernel.org/stable/c/8558e3195664113c14a4d8fcf221b3caff41fed1","https://git.kernel.org/stable/c/7d059f390750152b9bd69df934198651b94fc26d"],"weaknesses":[],"ingestedAt":"2026-10-29T20:13:43.249Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/97xxx/CVE-2026-97973.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-97973","state":"PUBLISHED","datePublished":"2026-09-25T10:23:12.759Z","dateUpdated":"2026-10-19T09:11:39.063Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-09-25T10:18:58.207Z"},"containers":{"cna":{"title":"net: macb: destroy the phylink instance on the probe error path","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: macb: destroy the phylink instance on the probe error path\n\nmacb_mii_init() creates a phylink instance on both of its success paths,\nbut the probe unwind frees the netdev without destroying it, so a failing\nmacb_alloc_tieoff() or register_netdev() leaks the instance.\n\nDestroy it at err_out_unregister_mdio, which is only reachable once\nmacb_mii_init() has succeeded, so bp->phylink is valid there."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"0112aa02c7847314be599d68783d50c7e228a694","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"c1de1e7b51ab2531f564b39b51998c3d71caccd7","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"23b6a44ffea1c54a4232aa86ee470b21422a8cc5","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"e92a45b872b035c79acde8dd0da096a72b61ff2f","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"8558e3195664113c14a4d8fcf221b3caff41fed1","versionType":"git"},{"version":"7897b071ac3b45a5788d084fc7f8a8ee9e5f07f0","status":"affected","lessThan":"7d059f390750152b9bd69df934198651b94fc26d","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/ethernet/cadence/macb_main.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"5.5","status":"affected"},{"version":"0","status":"unaffected","lessThan":"5.5","versionType":"semver"},{"version":"6.1.189","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.158","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.111","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.18.53","status":"unaffected","lessThanOrEqual":"6.18.*","versionType":"semver"},{"version":"7.2.7","status":"unaffected","lessThanOrEqual":"7.2.*","versionType":"semver"},{"version":"7.3","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["drivers/net/ethernet/cadence/macb_main.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/0112aa02c7847314be599d68783d50c7e228a694"},{"url":"https://git.kernel.org/stable/c/c1de1e7b51ab2531f564b39b51998c3d71caccd7"},{"url":"https://git.kernel.org/stable/c/23b6a44ffea1c54a4232aa86ee470b21422a8cc5"},{"url":"https://git.kernel.org/stable/c/e92a45b872b035c79acde8dd0da096a72b61ff2f"},{"url":"https://git.kernel.org/stable/c/8558e3195664113c14a4d8fcf221b3caff41fed1"},{"url":"https://git.kernel.org/stable/c/7d059f390750152b9bd69df934198651b94fc26d"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-10-19T09:11:39.063Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.1.189"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.6.158"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.12.111"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"6.18.53"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"7.2.7"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.5","versionEndExcluding":"7.3"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}