mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() When mlxsw_sp_port_lag_index_get() fails, mlxsw_sp_port_lag_join() returns an error without releasing the lag reference obtained by the earlier mlxsw_sp_lag_get(). All other error paths in the function jump to the cleanup label that ends with mlxsw_sp_lag_put(), so this is a single missed release. Fix the leak by replacing the bare 'return err' with a goto to the existing error cleanup label, which will drop the reference safely.
CVE-2026-72308
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:CVE-2026-72308
Kernel
Source reference: /affected/1/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 5.10.266
Source reference:
/affected/1/ranges5.15.217Source reference:
/affected/1/ranges6.1.184Source reference:
/affected/1/ranges6.6.145Source reference:
/affected/1/ranges6.12.97Source reference:
/affected/1/ranges6.18.40Source reference:
/affected/1/ranges7.1.5Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "0d65fc13042fce6a2d6de58ff0dc9531e8523c07"
},
{
"fixed": "3fbeaa8ecd144ad593f9fa1ab4b40a780ad3700b"
},
{
"fixed": "99ff5b0083eae6f774360c4ea6874604e6c9b553"
},
{
"fixed": "9bf2d6eea26a226f8ebab7baea6f2b018f914560"
},
{
"fixed": "8b3350eacd9df0597bfe36a594df7b9def0b3edf"
},
{
"fixed": "1cf8a1af42b1f12a30b7abd34fe4fc23b3170e7e"
},
{
"fixed": "2d8b3c3e129973a51ae924bdcf6993a76b828814"
},
{
"fixed": "cab468c3c03f4bcd7530ce2783a4140da14efb7b"
},
{
"fixed": "41c8c1d65b32beacd8d916a22457b4f6e47f45af"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72308.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.5.0"
},
{
"fixed": "5.10.266"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.217"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.184"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.145"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.97"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.40"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.1.5"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72308.json"
}
}
]- Related CVEs
- CVE-2026-72308
Source reference:
/id
Publisher severity
No explicit severity was provided.
- Event
- #50720 · Revision 1
- Added to Heist Feed
- Publisher date