CVE-2026-46162: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: ice: fix double free in ice_sf_eth_activate() error path When auxiliary_device_add() fails, ice_sf_eth_activate() jumps to aux_dev_uninit and calls auxiliary_device_uninit(&sf_dev->adev). The device release callback ice_sf_dev_release() frees sf_dev, but the current error path falls through to sf_dev_free and calls kfree(sf_dev) again, causing a double free. Keep kfree(sf_dev) for the auxiliary_device_init() failure path, but avoid falling through to sf_dev_free after auxiliary_device_uninit().

Засегнати продукти

• Linux Linux: 13acc5c4cdbeccf3274cbbd4de2e2d316b8c4ce6 преди 2ca30340b5028ddc3f17086a538feeff06167b1b; 13acc5c4cdbeccf3274cbbd4de2e2d316b8c4ce6 преди 121d1f253aed515cd85748f68c664a6cb756e8ad; 13acc5c4cdbeccf3274cbbd4de2e2d316b8c4ce6 преди d0c6a4816609f145ffcc74e64baa214c571c17c6; 13acc5c4cdbeccf3274cbbd4de2e2d316b8c4ce6 преди 9aab1c3d7299285e2569cbc0ed5892d631a241b2
• Linux Linux: 6.12; преди 6.12; 6.12.88 до 6.12.*; 6.18.30 до 6.18.*; 7.0.7 до 7.0.*; от 7.1 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-46162
• https://nvd.nist.gov/vuln/detail/CVE-2026-46162
• https://git.kernel.org/stable/c/2ca30340b5028ddc3f17086a538feeff06167b1b
• https://git.kernel.org/stable/c/121d1f253aed515cd85748f68c664a6cb756e8ad
• https://git.kernel.org/stable/c/d0c6a4816609f145ffcc74e64baa214c571c17c6
• https://git.kernel.org/stable/c/9aab1c3d7299285e2569cbc0ed5892d631a241b2