CVE-2026-72411

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the mxl862xx driver within the Distributed Switch Architecture (DSA) subsystem. When an MDIO CRC error occurs, the function mxl862xx crc err work fn() iterates through DSA ports to close CPU port conduits. However, during the teardown process, mxl862xx remove() unregisters the switch via dsa unregister switch(), which frees the dsa port objects. If the CRC error work is scheduled during this teardown, it may execute after the ports have been freed, leading to a dereference of freed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.