Resource Management Vulnerability in Linux Kernel's Microchip Sparx5 Product

CVE-2026-98908

What is CVE-2026-98908?

A notable vulnerability in the Linux kernel affects the Microchip Sparx5 product, where resources for PSFP (Precision Time Protocol Stream Filter) are not properly unwound during setup failures. This occurs when the function 'sparx5_tc_flower_psfp_setup()' allocates resources such as the stream gate, flow meter, and stream filter but fails to release them if subsequent steps encounter issues. The direct result is a potential for resource leaks, as an existing flow meter reference may not be appropriately managed if a setup step fails. This vulnerability highlights the importance of effective resource management in kernel operations.

References