CVE-2026-72411

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work Upon an MDIO CRC error mxl862xx_crc_err_work_fn() walks the DSA ports and closes the CPU port conduits: dsa_switch_for_each_cpu_port(dp, priv->ds) dev_close(dp->conduit); mxl862xx_remove() unregisters the switch before cancelling this work: set_bit(MXL862XX_FLAG_WORK_STOPPED, &priv->flags); cancel_delayed_work_sync(&priv->stats_work); dsa_unregister_switch(ds); mxl862xx_host_shutdown(priv); dsa_unregister_switch() frees the dsa_port objects. If a CRC error schedules the work during teardown it can run after the ports have been freed and dereference freed memory. Guard the port walk with MXL862XX_FLAG_WORK_STOPPED, which is already set before dsa_unregister_switch(). DSA tears the ports down under rtnl_lock(), so checking the flag under rtnl_lock() means the work either runs before teardown and sees valid ports, or runs afterwards, observes the flag and skips the walk. This mirrors the host_flood_work handler, which skips torn-down ports under rtnl_lock().

• https://git.kernel.org/stable/c/bcb3b8314611ed9cb4ff4bff484ef9b154fd1b83
• https://git.kernel.org/stable/c/cf52622fbc274eb4ca9a2066b258da2ae3dc7406

Published

Aug 15, 2026

Last Modified

Aug 17, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-72406In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-72407In the Linux kernel, the following vulnerability has been re…10
• CVE-2026-72408In the Linux kernel, the following vulnerability has been re…10
• CVE-2026-72409In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-7241A vulnerability was found in Totolink A8000RU 7.1cu.643_b202…9.8
• CVE-2026-72410In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-72412In the Linux kernel, the following vulnerability has been re…9.3
• CVE-2026-72413In the Linux kernel, the following vulnerability has been re…
• CVE-2026-72414In the Linux kernel, the following vulnerability has been re…
• CVE-2026-72415In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-72416In the Linux kernel, the following vulnerability has been re…7.3
• CVE-2026-72417In the Linux kernel, the following vulnerability has been re…9.8