https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 22:38:27 +0000 https://vulnerability.circl.lu/vuln/cve-2026-31475 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: sma1307: fix double free of devm_kzalloc() memory</p> <p>A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded().</p> <p>However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory.</p> <p>Drop the manual kfree() loop and let devres handle the cleanup.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: sma1307: fix double free of devm_kzalloc() memory</p> <p>A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded().</p> <p>However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory.</p> <p>Drop the manual kfree() loop and let devres handle the cleanup.</p> https://vulnerability.circl.lu/vuln/cve-2026-31475