CVE-2026-98948

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: spectrum flower: Fix port range register leak in tmplt create()

mlxsw sp flower tmplt create() parses a flow cls offload template into a stack-local struct mlxsw sp acl rule info purely to compute rulei.values.elusage. Parsing can acquire port range registers via mlxsw sp flower parse ports range(), but since this rulei never goes through mlxsw sp acl rulei destroy(), those registers were never released, including through chain template deletion.

Factor out of mlxsw sp acl rulei destroy() the code to actually release the necessary resources and call from mlxsw sp flower tmplt create() to plug the leak.

The issue was found during a review of Wentao Liang's patch referenced below.