Aller au contenu
Non notée

CVE-2026-23030 In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: inno-usb2: Fix a double free bug in…

Description

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() The for_each_available_child_of_node() calls of_node_put() to release child_np in each success loop. After breaking from the loop with the child_np has been released, the code will jump to the put_child label and will call the of_node_put() again if the devm_request_threaded_irq() fails. These cause a double free bug. Fix by returning directly to avoid the duplicate of_node_put().

Produits et versions touchés

Produit Versions touchées Corrigé en
Linux 6.19 premières → < 6.19 6.19
Linux 6.18 premières → < 6.18.7 6.18.7
Linux 6.12 premières → < 6.12.67 6.12.67
Linux 6.6 premières → < 6.6.122 6.6.122
Linux 6.1 premières → < 6.1.162 6.1.162
Linux 5.17 Pas de correctif indiqué
RUGGEDCOM RST2428P 4.0 premières → < 4.0 4.0

Références

Chronologie

  1. Publiée
  2. Dernière modification
Les 18283 CVE de Linux →
Suivre cette CVE