CVE-2026-31759
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interface() error path When device_register() fails, ulpi_register() calls put_device() on ulpi->dev. The device release callback ulpi_dev_release() drops the OF node reference and frees ulpi, but the current error path in ulpi_register_interface() then calls kfree(ulpi) again, causing a double free. Let put_device() handle the cleanup through ulpi_dev_release() and avoid freeing ulpi again in ulpi_register_interface().
वीकनेस
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interface() error path When device_register() fails, ulpi_register() calls put_device() on ulpi->dev. The device release callback ulpi_dev_release() drops the OF node reference and frees ulpi, but the current error path in ulpi_register_interface() then calls kfree(ulpi) again, causing a double free. Let put_device() handle the cleanup through ulpi_dev_release() and avoid freeing ulpi again in ulpi_register_interface().
प्रभावित प्रोडक्ट
- linux linux_kernel
संदर्भ
- https://git.kernel.org/stable/c/01af542392b5d41fd659d487015a71f627accce3
- https://git.kernel.org/stable/c/272a9b26c336a295e4e209157fed809706c1b1f7
- https://git.kernel.org/stable/c/2f70ba9dae13a190673cc3f9b4aad52179738f60
- https://git.kernel.org/stable/c/38c28fe25611099230f0965c925499bfcf46a795
- https://git.kernel.org/stable/c/8763f8317bb389aded32a32b08f6751cfff657d2
- https://git.kernel.org/stable/c/a6e5461f076c2ef63159f18e5cdbd30b50f0bc15
हमलावर से पहले बग आप ढूँढें।
GitHub से साइन इन करें और एक मिनट से भी कम में अपना पहला ऑडिट चलाएँ। फ़्री प्लान के लिए क्रेडिट कार्ड की ज़रूरत नहीं।