CVE-2026-97972EPSS p5.3%
CVE-2026-97972CVE-2026-97972
Description
In the Linux kernel, the following vulnerability has been resolved:
net: macb: put the "mdio" child node reference on success
macb_mii_init() holds the reference returned by of_get_child_by_name()
for macb_mdiobus_register() and drops it only on the error paths, so
every successful probe leaks a node reference. On a CM5, overlay
removal after four bind cycles reports
OF: ERROR: memory leak, expected refcount 1 instead of 5
Drop the reference after registration, where __mdiobus_register() has
already taken its own for the lifetime of the bus.
Scoring
| EPSS | 0.17% probability of exploitation · percentile 5.3% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-25 |