Linux Kernel: Microchip SPARX5 PSFP Resource Leak on Setup Failure
CVE-2026-98908 Published on October 23, 2026
net: microchip: sparx5: clean up PSFP resources on flower setup failure
In the Linux kernel, the following vulnerability has been resolved:
net: microchip: sparx5: clean up PSFP resources on flower setup failure
sparx5_tc_flower_psfp_setup() allocates PSFP stream gate, flow meter and
stream filter resources before adding VCAP actions. If a later step
fails, the resources allocated earlier in the function are not unwound.
Add error paths to release the stream filter, flow meter and stream gate
when setup fails after they have been acquired.
Also make sparx5_psfp_fm_add() return the acquired flow-meter id before
the existing-flow-meter early return. When an existing flow meter is
reused, sparx5_psfp_fm_get() increments its pool reference count, but the
caller previously kept psfp_fmid as 0. If a later setup step failed, the
error path could try to delete flow-meter id 0 instead of the reused flow
meter, leaving the incremented reference behind.
Products Associated with CVE-2026-98908
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 6ebf182bfdf15bd58ebcf6760b06458694e0fad2 and below a7625d408f7f0535c2b0f05d53231d6496acd48b is affected.
- Version 6ebf182bfdf15bd58ebcf6760b06458694e0fad2 and below a46ea3f7ee0d3ad3d5e92043232b293be2a305d3 is affected.
- Version 6ebf182bfdf15bd58ebcf6760b06458694e0fad2 and below 640c1bd8d359ad34817f5afec0872985e87b49ec is affected.
- Version 6ebf182bfdf15bd58ebcf6760b06458694e0fad2 and below 46e50367338702abe3df661df7795bdada40fef7 is affected.
- Version 6.3 is affected.
- Before 6.3 is unaffected.
- Version 6.6.158, <= 6.6.* is unaffected.
- Version 6.12.111, <= 6.12.* is unaffected.
- Version 6.18.53, <= 6.18.* is unaffected.
- Version 7.2, <= * is unaffected.