Vulnerability feed

Executive summary

A memory leak in the Linux kernel's Microchip Sparx5 network driver causes memory to be lost each time a matchall traffic filter is deleted. The advisory does not state a severity rating, and the fix is a one-line code change in the stable kernel tree that frees the entry after it is removed from the list.

Technical summary

This is a memory leak (CWE class not stated) in the sparx5 matchall traffic control code of the Linux kernel. sparx5_tc_matchall_destroy() unlinks each sparx5_mall_entry from sparx5->mall_entries but never frees it, so every deleted mirror or goto matchall filter leaks memory. The advisory does not state the attack vector, privileges required, or any exploitation impact beyond the leak. The fix adds a kfree(entry) call after list_del() in drivers/net/ethernet/microchip/sparx5/sparx5_tc_matchall.c, referenced by commit 2b82e16d6084cbc651e3c902198f1945408ee1a5. Affected and fixed kernel version numbers are not stated in the advisory. No workaround, CVSS score, or exploitation status is stated. Detection guidance is limited to kmemleak reporting the leak, which the advisory says no longer occurs with the fix.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/2b82e16d6084cbc…c902198f1945408ee1a5

Score

No CVSS score published.

Affects

LinuxMicrochipLinuxLinux kernelMicrochip sparx5

Executive summary

This advisory describes a resource cleanup bug in the Linux kernel stable tree's Microchip Sparx5 network driver, where hardware resources for PSFP flower filters are not released when setup fails partway. The advisory text does not state how severe the issue is, whether it can be exploited, or any impact beyond resource leakage. It does not state a CVSS score or any workaround, and the material provided shows a kernel patch as the fix.

Technical summary

The flaw is a resource leak in the sparx5_tc_flower_psfp_setup() function in the sparx5 driver, where stream gate, flow meter, and stream filter resources allocated earlier are not unwound when a later step fails. The patch adds error paths that release the stream filter, flow meter, and stream gate, and changes sparx5_psfp_fm_add() to return the acquired flow-meter id before the early return for reused flow meters, so the error path deletes the correct meter instead of id 0. The advisory does not state the attack vector, required privileges, or whether an attacker can trigger the failure path. Affected and fixed version numbers are not stated in the text beyond the commit and patch identifiers. No workaround and no detection guidance are stated.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/46e50367338702a…661df7795bdada40fef7

Score

No CVSS score published.

Affects

LinuxMicrochipLinuxLinux kernelMicrochip sparx5

Executive summary

A fix was merged into the Linux kernel stable tree for the lan966x network driver, where a failed RX reload could leave receive state inconsistent. The advisory does not state a severity rating, exploitability, or any customer impact beyond the described inconsistency. The provided change restores the saved page order, maximum MTU, and XDP page pool registration when the reload fails, and the advisory does not describe any other recommended action.

Technical summary

The flaw is an inconsistent state restoration problem in lan966x_fdma_reload(), which fails to restore rx->page_order and rx->max_mtu after a failed reload to a new MTU, and fails to restore the per-port XDP RXQ memory model registration. The advisory describes the result as possible XDP frame size mismatches against restored pages, but it does not state a vulnerability class such as memory corruption or privilege escalation, nor an attack vector or preconditions. Affected and fixed kernel versions are not stated as version ranges, and the commit is referenced by hash only. No workaround, exploitation status, CVSS score, or detection guidance is stated in the advisory.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/3883898ddc26308…ba8068951ab5eddbd111

Score

No CVSS score published.

Affects

LinuxMicrochipLinuxLinux kernelMicrochip lan966x