Description
In the Linux kernel, the following vulnerability has been resolved:

net: microchip: sparx5: clean up PSFP resources on flower setup failure

sparx5_tc_flower_psfp_setup() allocates PSFP stream gate, flow meter and
stream filter resources before adding VCAP actions. If a later step
fails, the resources allocated earlier in the function are not unwound.

Add error paths to release the stream filter, flow meter and stream gate
when setup fails after they have been acquired.

Also make sparx5_psfp_fm_add() return the acquired flow-meter id before
the existing-flow-meter early return. When an existing flow meter is
reused, sparx5_psfp_fm_get() increments its pool reference count, but the
caller previously kept psfp_fmid as 0. If a later setup step failed, the
error path could try to delete flow-meter id 0 instead of the reused flow
meter, leaving the incremented reference behind.
Published: 2026-10-23
Score: n/a
EPSS: n/a
KEV: No
Impact: Denial of Service via resource exhaustion
Action: Patch
AI Analysis

Impact

The Linux kernel driver for Microchip sparx5 fails to release PSFP stream gate, flow meter, and stream filter resources when a flower configuration step fails. The bug causes a persistent kernel resource leak, which can accumulate over time and potentially exhaust kernel memory or other scarce resources, leading to system instability or a crash.

Affected Systems

Linux kernel implementations that include the Microchip sparx5 network driver, regardless of specific kernel version, are susceptible until the driver incorporates the described cleanup fix.

Risk and Exploitability

Because the failure path is triggered during PSFP flower configuration, an attacker would need to be able to induce repeated configuration failures, which is inferred to require either privileged system access or the ability to craft network traffic that engages this particular driver function. The exact likelihood of exploitation is not quantified—EPSS is not available, no CVSS score was provided, and the vulnerability is not listed in CISA KEV. The potential impact is a denial‑of‑service condition through resource exhaustion if an attacker successfully triggers the error path repeatedly.

Generated by OpenCVE AI on October 23, 2026 at 17:34 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update to a kernel release that contains the sparx5_psfp resource cleanup patch
  • If no patch is available, disable PSFP or flower features in the driver to prevent the failure path from being exercised
  • Continuously monitor kernel logs and system resource usage for signs of leaks, using this information to identify if the bug remains active

Generated by OpenCVE AI on October 23, 2026 at 17:34 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 18:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-211
CWE-667

Fri, 23 Oct 2026 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5_tc_flower_psfp_setup() allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resources allocated earlier in the function are not unwound. Add error paths to release the stream filter, flow meter and stream gate when setup fails after they have been acquired. Also make sparx5_psfp_fm_add() return the acquired flow-meter id before the existing-flow-meter early return. When an existing flow meter is reused, sparx5_psfp_fm_get() increments its pool reference count, but the caller previously kept psfp_fmid as 0. If a later setup step failed, the error path could try to delete flow-meter id 0 instead of the reused flow meter, leaving the incremented reference behind.
Title net: microchip: sparx5: clean up PSFP resources on flower setup failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-23T11:54:46.243Z

Reserved: 2026-09-25T10:25:14.379Z

Link: CVE-2026-98908

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-23T12:18:24.907

Modified: 2026-10-23T12:18:24.907

Link: CVE-2026-98908

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-23T17:45:17Z

Weaknesses
  • CWE-211

    Externally-Generated Error Message Containing Sensitive Information

  • CWE-667

    Improper Locking