CVE-2026-97972 Linux CVE debrief

Who should care

Linux kernel developers, administrators, and users of systems relying on the macb driver should assess exposure and apply patches or updates as needed. The vulnerability can cause memory leaks and potentially lead to denial-of-service or other issues if exploited. Verify Linux kernel versions in use and check for patches or updates addressing CVE-2026-97972. Review system configurations and deployments using the macb driver. Monitor for potential memory

Why it matters

CVE-2026-97972 is a memory leak vulnerability in the Linux kernel's macb driver. While specific exploitation details are not provided, verifying and patching affected systems is crucial to prevent potential issues.

• Verify Linux kernel versions and configurations to identify potential exposure
• Monitor system behavior for signs of memory leaks or unusual activity
• Apply patches or updates to affected systems to prevent potential issues

Technical summary

The Linux kernel's macb driver has a memory leak vulnerability due to a held reference to the 'mdio' child node not being dropped on successful probes. This issue has been resolved in later kernel versions. The vulnerability can cause memory leaks and potentially lead to denial-of-service or other issues if exploited. Linux kernel developers, administrators, and users of systems relying on the macb driver should assess exposure and apply patches or updates as needed. The CVE record and NVD entry provide details on the vulnerability, but specific affected versions and exploitation details are not provided.

Defensive priority

Verify and apply patches for Linux kernel versions affected by CVE-2026-97972, particularly in environments using the macb driver.

Recommended defensive actions

• Verify Linux kernel versions in use and check for patches or updates addressing CVE-2026-97972
• Review system configurations and deployments using the macb driver
• Monitor for potential memory leaks or unusual behavior in affected systems
• Apply patches or updates to affected systems to prevent potential issues
• Verify and apply patches for Linux kernel versions affected by CVE-2026-97972, particularly in environments using the macb driver
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but specific affected versions and exploitation details are not provided. The vulnerability has been resolved in later kernel versions. Linux kernel developers, administrators, and users of systems relying on the macb driver should assess exposure and apply patches or updates as needed. The memory leak vulnerability can cause memory leaks and potentially lead to denial-of-service or other issues if exploited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.