most: core: fix leak on early registration failure (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.12 % · percentile 2 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: most: core: fix leak on early registration failure A recent commit fixed a resource leak on early registration failures but for some reason left out the first error path which still leaks the resources associated with the interface. Fix up also the first error path so that the interface is always released on errors.
Weaknesses (CWE)
- CWE-401 — Missing Release of Memory after Effective Lifetime
References
- https://git.kernel.org/stable/c/04474009a2ea7aa27c67d323952a23bb16d5acc5
- https://git.kernel.org/stable/c/bbfe49ffb892bddf32c34bea95b7ff0fc30affb5
- https://git.kernel.org/stable/c/f1ba620f9e8d7291f80c0554e4b820f5fb30e819
- https://git.kernel.org/stable/c/5fd4396c2e48e90cc2597a86c18227d56ea845f0
- https://git.kernel.org/stable/c/2c198c272f9c9213b0fdf6b4a879f445c574f416
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2026-28601
- GCVE · GCVE-0-2026-43317
CERT-FR advisories
- CERTFR-2026-AVI-0954 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0861 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0831 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.6 < 6.12.75cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.18.16cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.6cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 04474009a2ea7aa27c67d323952a23bb16d5acc5 ; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < bbfe49ffb892bddf32c34bea95b7ff0fc30affb5 ; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < f1ba620f9e8d7291f80c0554e4b820f5fb30e819 ; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 5fd4396c2e48e90cc2597a86c18227d56ea845f0 ; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 2c198c272f9c9213b0fdf6b4a879f445c574f416 |
| Linux · Linux | affected 5.6 ; unaffected 0 < 5.6 ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.75 ≤ 6.12.* ; unaffected 6.18.16 ≤ 6.18.* ; unaffected 6.19.6 ≤ 6.19.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |