CVE-2026-74718 PUBLISHED

devlink: fix net namespace reference leak in reload

Assigner: Linux
Reserved: 15.08.2026 Published: 22.08.2026 Updated: 22.08.2026

In the Linux kernel, the following vulnerability has been resolved:

devlink: fix net namespace reference leak in reload

devlink_nl_reload_doit() calls devlink_netns_get(), which returns a net with a held reference. When the requested namespace differs from the current one and the reload action is not DRIVER_REINIT, the function returns -EOPNOTSUPP without releasing the reference. Add the missing put_net() on this error path.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 2edd92570441dd33246210042dc167319a5cf7e3 to 7b6552e53426ea0539c667bbc5a524fdf7feae6f (excl.)
  • affected from 2edd92570441dd33246210042dc167319a5cf7e3 to bf0797b92be591ac71d7c0f610e695caca3c72c9 (excl.)
  • affected from 2edd92570441dd33246210042dc167319a5cf7e3 to 7b02c6d2a3cd2cd669f5c16685779f84328ae60c (excl.)
  • affected from 2edd92570441dd33246210042dc167319a5cf7e3 to eda60c85b4f4c7d66b7141a5fe020b1a7f395341 (excl.)
  • affected from 2edd92570441dd33246210042dc167319a5cf7e3 to 1c4dac9bf1d2ac31da63b794bdec697777cbd0fd (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.3 is affected
  • unaffected from 0 to 6.3 (excl.)
  • unaffected from 6.6.152 to 6.6.* (incl.)
  • unaffected from 6.12.104 to 6.12.* (incl.)
  • unaffected from 6.18.45 to 6.18.* (incl.)
  • unaffected from 7.1.9 to 7.1.* (incl.)
  • unaffected from 7.2 to * (incl.)

References