Linux Kernel Vulnerability in Dpaa2 Switch Functionality

CVE-2026-98911

What is CVE-2026-98911?

A vulnerability in the Linux kernel was identified in the dpaa2_switch function. Specifically, during error handling in dpaa2_switch_rx(), an incorrect function call to dpaa2_switch_free_fd() was made, which is meant for Tx frame descriptors. This error could lead to memory management issues when an error occurs before a socket buffer (SKB) is created. The vulnerability has been addressed by modifying the code to facilitate proper error handling, specifically by utilizing free_pages() appropriately when no SKB has been initialized. This rectification enhances the overall stability and security of the Linux kernel's network operations.

References