CVE-2026-68333

A flaw was found in the dpaa2-switch component of the Linux kernel. When a MAC (Media Access Control) object is disconnected, the system fails to release a reference to the associated MAC endpoint device. This oversight causes a device reference to leak with every successful connection and subsequent disconnection, potentially leading to resource exhaustion over time.

This issue affects NXP DPAA2 Ethernet switch ports. On MAC disconnect, the MAC endpoint device obtained via fsl_mc_get_endpoint() is not put, leaking device references. Systems without DPAA2 switch hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the dpaa2-switch module from loading. See https://access.redhat.com/solutions/41278 for instructions.