CVE-2026-31759
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interface() error path When device_register() fails, ulpi_register() calls put_device() on ulpi->dev. The device release callback ulpi_dev_release() drops the OF node reference and frees ulpi, but the current error path in ulpi_register_interface() then calls kfree(ulpi) again, causing a double free. Let put_device() handle the cleanup through ulpi_dev_release() and avoid freeing ulpi again in ulpi_register_interface().
Schwachstellenklasse
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interface() error path When device_register() fails, ulpi_register() calls put_device() on ulpi->dev. The device release callback ulpi_dev_release() drops the OF node reference and frees ulpi, but the current error path in ulpi_register_interface() then calls kfree(ulpi) again, causing a double free. Let put_device() handle the cleanup through ulpi_dev_release() and avoid freeing ulpi again in ulpi_register_interface().
Betroffene Produkte
- linux linux_kernel
Quellen
- https://git.kernel.org/stable/c/01af542392b5d41fd659d487015a71f627accce3
- https://git.kernel.org/stable/c/272a9b26c336a295e4e209157fed809706c1b1f7
- https://git.kernel.org/stable/c/2f70ba9dae13a190673cc3f9b4aad52179738f60
- https://git.kernel.org/stable/c/38c28fe25611099230f0965c925499bfcf46a795
- https://git.kernel.org/stable/c/8763f8317bb389aded32a32b08f6751cfff657d2
- https://git.kernel.org/stable/c/a6e5461f076c2ef63159f18e5cdbd30b50f0bc15
Finden Sie die Schwachstelle, bevor es ein Angreifer tut.
Melden Sie sich mit GitHub an und starten Sie Ihr erstes Audit in weniger als einer Minute. Für den kostenlosen Plan ist keine Kreditkarte nötig.