Description
In the Linux kernel, the following vulnerability has been resolved:

net: ti: icssm-prueth: fix eth_ports_node leak in probe

The error path on of_property_read_u32() failure inside
icssm_prueth_probe() returns without putting eth_ports_node,
which was acquired before the for_each_child_of_node() loop.

Drop it before returning.
Published: 2026-07-19
Score: n/a
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

During initialization, the Linux icssm_prueth driver fails to release an allocated node when a property read fails, causing eth_ports can accumulate, potentially exhausting kernel memory and resulting in degraded performance or a crash. This is a memory resource leak problem, related to CWE-772, which denotes unsafe handling of allocated resources.

Affected Systems

The issue affects all Linux kernel builds that include the icssm_prueth driver. This driver is part of the TI network interface stack and is found in many distributions that ship hardware supporting this driver. The lack of version constraints means any kernel that has compiled or loaded this driver may be impacted.

Risk and Exploitability

Based on the description, it is inferred that an attacker would need to trigger the probe path for the icssm_prueth driver, likely requiring local access or a crafted packet to the affected Ethernet device. The EPSS score is below 1%, indicating a very low probability of exploitation. The CVE is not listed in the CISA KEV catalog and no public exploits are known. Given the low likelihood of exploitation and the resources needed, the overall risk is low, although the leak could affect system availability if left unmitigated.

Generated by OpenCVE AI on July 30, 2026 at 20:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to a kernel version that includes the fix for the icssm_prueth driver
  • If the driver is not required, unload or blacklist the module to stop the probe from running
  • If upgrading is not possible, manually apply the upstream patch that drops eth_ports_node before returning on error

Generated by OpenCVE AI on July 30, 2026 at 20:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8593-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-8603-1 Linux kernel (Azure) vulnerabilities
Ubuntu USN Ubuntu USN USN-8618-1 Linux kernel vulnerabilities
History

Mon, 20 Jul 2026 12:15:00 +0000


Sun, 19 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix eth_ports_node leak in probe The error path on of_property_read_u32() failure inside icssm_prueth_probe() returns without putting eth_ports_node, which was acquired before the for_each_child_of_node() loop. Drop it before returning.
Title net: ti: icssm-prueth: fix eth_ports_node leak in probe
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-07-19T15:40:47.761Z

Reserved: 2026-07-19T07:54:57.038Z

Link: CVE-2026-64161

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity :

Publid Date: 2026-07-19T00:00:00Z

Links: CVE-2026-64161 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-07-30T20:15:05Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime