CVE-2026-68475
reset: sunxi: fix memory region leak on ioremap failure
Not available
At a glance
- Source
- NVD
- EPSS
- EPSS 0.22 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Received
Description
In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap failure In sunxi_reset_init(), when ioremap() fails, the memory region obtained via request_mem_region() is not released, leading to a resource leak. Add an err_mem_region label to properly release the memory region before freeing the data structure.
References
- https://git.kernel.org/stable/c/23af4ea217800a20c405d72e82b11e24e27721f3
- https://git.kernel.org/stable/c/ec836995c00a1968e403ef6beb53a73a9b0f318c
- https://git.kernel.org/stable/c/b4d7333849839ff42e1bc802d5b5f63d71c65add
- https://git.kernel.org/stable/c/6dc0c8cd9c8a84808c6df760024d2604bc6d31fe
- https://git.kernel.org/stable/c/01e43f4e7d12dae6fa82ae1b2e91c9ce07e06cd8
- https://git.kernel.org/stable/c/82753ac86cb3d641b8634a61335fd0f04a61cc1a
- https://git.kernel.org/stable/c/d826d3e04c5bd9d284ba29f330246a317a8a7023
- https://git.kernel.org/stable/c/1a8c89f8c112c75e84ff9a140f969e372aed0c9a
European references
- ENISA EUVD · EUVD-2026-59097
- GCVE · GCVE-0-2026-68475
CERT-FR advisories
- CERTFR-2026-AVI-1385 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1333 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1286 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 8f1ae77f466660b6da2455cccecc07ae631fa66d < 23af4ea217800a20c405d72e82b11e24e27721f3 ; affected 8f1ae77f466660b6da2455cccecc07ae631fa66d < ec836995c00a1968e403ef6beb53a73a9b0f318c ; affected 8f1ae77f466660b6da2455cccecc07ae631fa66d < b4d7333849839ff42e1bc802d5b5f63d71c65add ; affected 8f1ae77f466660b6da2455cccecc07ae631fa66d < 6dc0c8cd9c8a84808c6df760024d2604bc6d31fe ; affected 8f1ae77f466660b6da2455cccecc07ae631fa66d < 01e43f4e7d12dae6fa82ae1b2e91c9ce07e06cd8 ; affected 8f1ae77f466660b6da2455cccecc07ae631fa66d < 82753ac86cb3d641b8634a61335fd0f04a61cc1a |
| Linux · Linux | affected 3.14 ; unaffected 0 < 3.14 ; unaffected 5.10.261 ≤ 5.10.* ; unaffected 5.15.212 ≤ 5.15.* ; unaffected 6.1.178 ≤ 6.1.* ; unaffected 6.6.145 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |