The vulnerability of the `of_unittest_changeset()` function in the `drivers/of/unittest.c` module of the Linux operating system’s device and open-source driver tree allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ofunittestchangeset function in the drivers/of/unittest.c module of the Linux device and open-source kernel tree driver framework is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2026-46288 of: unittest: fix use-after-free in of_unittest_changeset()

In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in ofunittestchangeset The variable 'parent' is assigned the value of 'nchangeset' earlier in the function, meaning both point to the same struct devicenode. The call to ofnodeputnchangeset can...

CVE-2026-46288

CVE-2026-46288 (Linux kernel). The issue is a use-after-free in unittest changeset handling of device-tree nodes: a pointer (parent) shares the same struct device_node as nchangeset, and of_node_put(nchangeset) can drop the refcount to zero while code still uses parent to inspect properties, lead...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the reuse of a memory block released by the ofunittestchangeset function, potentially leading to...