Към съдържанието
Търсене

CVE-2026-43328: Linux

Няма оценка

CVSS

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

    Описание

    Оригинално описание

    In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path When kobject_init_and_add() fails, cpufreq_dbs_governor_init() calls kobject_put(&dbs_data->attr_set.kobj). The kobject release callback cpufreq_dbs_data_release() calls gov->exit(dbs_data) and kfree(dbs_data), but the current error path then calls gov->exit(dbs_data) and kfree(dbs_data) again, causing a double free. Keep the direct kfree(dbs_data) for the gov->init() failure path, but after kobject_init_and_add() has been called, let kobject_put() handle the cleanup through cpufreq_dbs_data_release().

    Засегнати продукти

    • Linux Linux: 4ebe36c94aed95de71a8ce6a6762226d31c938ee преди 56bc91ee78babe9578585a2bc137abc4b3115ff3; 4ebe36c94aed95de71a8ce6a6762226d31c938ee преди 4b9118e93d2499bb2808ef3742fa0ce06f4f8117; 4ebe36c94aed95de71a8ce6a6762226d31c938ee преди 019ea28629720c220daedf38107c8787f330dc05; 4ebe36c94aed95de71a8ce6a6762226d31c938ee преди da39ee627fd82b52068d4d5f115749a8b7d271f9; 4ebe36c94aed95de71a8ce6a6762226d31c938ee преди 427d048e4f6acbfa01b5a8062449fe0ee8987c0d; 4ebe36c94aed95de71a8ce6a6762226d31c938ee преди d2703b4f8fb7cc6f0dfdb2dc2359cc46189e7357; 4ebe36c94aed95de71a8ce6a6762226d31c938ee преди 3bf9d023d2329a0e5379f2fd09d06ef09729cd9d; 4ebe36c94aed95de71a8ce6a6762226d31c938ee преди 6dcf9d0064ce2f3e3dfe5755f98b93abe6a98e1e; e977b1477a6725868302957e6b5c330220391797; 5.1.6 преди 5.2
    • Linux Linux: 5.2; преди 5.2; 5.10.253 до 5.10.*; 5.15.209 до 5.15.*; 6.1.168 до 6.1.*; 6.6.134 до 6.6.*; 6.12.81 до 6.12.*; 6.18.22 до 6.18.*; 6.19.12 до 6.19.*; 7.0 до *

    История

    • 8 май 2026 Публикувано

    Други уязвимости в Linux Linux

    Първоизточници

    CVE-2026-43328: Linux | freedomonline.bg