CVE-2026-46109

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Missing Release of Memory after Effective Lifetime pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 ("usb: ulpi: fix double free in ulpi_register_interface() error path") removed kfree(ulpi) from ulpi_register_interface() to fix a double-free when device_register() fails. But when ulpi_of_register() or ulpi_read_id() fail before device_register() is called, the ulpi allocation is leaked. Add kfree(ulpi) on both error paths to properly clean up the allocation.

Rincian

Terbit di NVD

28 Mei 2026

Terakhir diubah

24 Juni 2026

Status NVD

Undergoing Analysis

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-401: Missing Release of Memory after Effective Lifetime

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 5,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/0b9fcab1b8608d429e5f239afb197de928d4de7d patch
• https://git.kernel.org/stable/c/0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c patch
• https://git.kernel.org/stable/c/2a71e01b2cf9b4329ff67102c1bea7448c2a2d2d patch
• https://git.kernel.org/stable/c/7bd61ed0bf9f4f1f2673d489b3bda1555b48d054 patch
• https://git.kernel.org/stable/c/b0c0d44adb55c66663886cb6e30ee92cbb0f5385 patch
• https://git.kernel.org/stable/c/be2c1d825f54277472c87019e82013ac534ddc4c patch
• https://git.kernel.org/stable/c/f1b855c00988a9cb41134cab7cf9faedba775dd9 patch
• https://git.kernel.org/stable/c/f30ccfc2985590b33a23a3d8bed7ca16c0af551b patch