EUVD-2026-86155

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix deviceregister error path When deviceregister fails in i3cmasterregisternewi3cdevs, putdevice is called to drop the reference taken by deviceregister. That drops the last reference, so the device's release callba...

CVE-2026-93283

The Linux kernel contains a vulnerability in the i3c master driver related to the device_register() error path. When device_register() fails within i3c_master_register_new_i3c_devs(), the subsequent call to put_device() drops the final reference, triggering i3c_device_release() and freeing the i3...

CVE-2026-93202

In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix recursive locking during device registration i3cmasterregisternewi3cdevs registers newly discovered devices while holding i3cbusnormaluselock, a downread. deviceregister can immediately probe the device, and prob...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: phy: mdio: fix memory leak Syzbot reported a memory leak in the MDIO bus interface. The problem lay in incorrect state logic. The MDIOBUSALLOCATED state indicates two possible statuses: 1. The bus is only allocated. 2. The bus is...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: fix possible memory leak in solosysfsinit If deviceregister returns an error in solosysfsinit, the name allocated by devsetname needs to be freed. As noted in the comments for deviceregister, it should use...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ALSA: ac97 – a possible memory leak has been fixed in sndac97devregister. If devregister fails in sndac97devregister, it should call putdevice to release the reference, otherwise the name allocated by devsetname may be leaked...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mailbox: zynq-ipi: fixed error handling when deviceregister fails When deviceregister fails, there are two issues: 1. The name allocated by devsetname is leaked. 2. The parent of the device is not NULL; deviceunregister is...

CVE-2026-89741

A double-free vulnerability exists in the Linux kernel's media subsystem , specifically in the v4l2-dev component's __video_register_device() function. A prior error-handling patch (commit 2a934fdb01db6458288fc9386d3d8ceba6dd551a) introduced the flaw: when device_register() fails, put_device() fr...

CVE-2026-89741

In the Linux kernel, the following vulnerability has been resolved: Revert "media: v4l2-dev: fix error handling in videoregisterdevice" This reverts commit 2a934fdb01db6458288fc9386d3d8ceba6dd551a. The intentions of that patch were good, but it doesn't work. The idea is that if deviceregister...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053422)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053422 advisory. In the Linux kernel, the following vulnerability has been resolved: NTB: fix possible name leak in ntbregisterdevice If deviceregister fails in ntbregisterdevice, th...

UBUNTU-CVE-2026-72484

In the Linux kernel, the following vulnerability has been resolved: staging: most: video: avoid double free on video register failure compregistervideodev allocates a videodevice with videodevicealloc and releases it if videoregisterdevice fails. This can double free the videodevice when...

SUSE CVE-2026-68416

In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARNON in addmtddevice error paths When deviceregister or mtdnvmemadd fails inside addmtddevice for a partition, the error handling triggers mtdrelease via putdevice or deviceunregister. mtdrelease calls...

CVE-2026-46221

In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocated via kzalloc in initonemc is assigned to dev-initname but never freed on the normal removal path. deviceregister copies initname and then sets dev-initname to...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006921)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006921 advisory. In the Linux kernel, the following vulnerability has been resolved: media: solo6x10: fix possible memory leak in solosysfsinit If deviceregister returns error in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-010905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-010905 advisory. In the Linux kernel, the following vulnerability has been resolved: mailbox: zynq-ipi: fix error handling while deviceregister fails If deviceregister fails, it has...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-011082)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011082 advisory. In the Linux kernel, the following vulnerability has been resolved: rapidio: rio: fix possible name leak in rioregistermport If deviceregister returns error, the nam...

CVE-2022-50857

The CVE-2022-50857 entry concerns the Linux kernel code path for rapidio rio: rio_register_mport. The issue arises when device_register() fails after an mport name has been allocated with dev_set_name(); the allocated name must be released, and the reference should be dropped with put_device() so...

CVE-2023-54017

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in ibmebusbusinit, name of kobject which is allocated in devsetname called in deviceadd is leaked. As comment of deviceadd says, it shoul...

CVE-2023-54017 powerpc/pseries: fix possible memory leak in ibmebus_bus_init()

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in ibmebusbusinit, name of kobject which is allocated in devsetname called in deviceadd is leaked. As comment of deviceadd says, it shoul...

CVE-2023-54017 powerpc/pseries: fix possible memory leak in ibmebus_bus_init()

In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: fix possible memory leak in ibmebusbusinit If deviceregister returns error in ibmebusbusinit, name of kobject which is allocated in devsetname called in deviceadd is leaked. As comment of deviceadd says, it shoul...