Live › vulnerability › CVE-2026-98908
Go to dashboardIn the Linux kernel's Microchip Sparx5 network driver, a failed PSFP flower setup does not release the stream gate, flow meter and stream filter resources it had already allocated, and a reused flow meter can be the wrong one to release. The sources describe a resource leak and wrong-id cleanup, and do not describe an attacker gaining access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the Microchip Sparx5 network driver (sparx5 switch hardware) that use PSFP stream filtering through tc flower offload. Hosts without Sparx5 hardware are not affected by this driver flaw. The sources do not say how a team confirms the driver is loaded.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
net: microchip: sparx5: clean up PSFP resources on flower setup failure
sparx5_tc_flower_psfp_setup() allocates PSFP stream gate, flow meter and stream filter resources before adding VCAP actions. If a later step fails, the resources allocated earlier in the function are not unwound.
Add error paths to release the stream filter, flow meter and stream gate when setup fails after they have been acquired.
Also make sparx5_psfp_fm_add() return the acquired flow-meter id before the existing-flow-meter early return. When an existing flow meter is reused, sparx5_psfp_fm_get() increments its pool reference count, but the caller previously kept psfp_fmid as 0. If a later setup step failed, the error path could try to delete flow-meter id 0 instead of the reused flow meter, leaving the incremented reference behind.
This page as .md · .json · in your agent: get_signal("CVE-2026-98908")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.