https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:24:28 +0000 https://vulnerability.circl.lu/vuln/cve-2026-45989 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>of: unittest: fix use-after-free in testdrv_probe()</p> <p>The function testdrv_probe() retrieves the device_node from the PCI device, applies an overlay, and then immediately calls of_node_put(dn). This releases the reference held by the PCI core, potentially freeing the node if the reference count drops to zero. Later, the same freed pointer &#39;dn&#39; is passed to of_platform_default_populate(), leading to a use-after-free.</p> <p>The reference to pdev-&gt;dev.of_node is owned by the device model and should not be released by the driver. Remove the erroneous of_node_put() to prevent premature freeing.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>of: unittest: fix use-after-free in testdrv_probe()</p> <p>The function testdrv_probe() retrieves the device_node from the PCI device, applies an overlay, and then immediately calls of_node_put(dn). This releases the reference held by the PCI core, potentially freeing the node if the reference count drops to zero. Later, the same freed pointer &#39;dn&#39; is passed to of_platform_default_populate(), leading to a use-after-free.</p> <p>The reference to pdev-&gt;dev.of_node is owned by the device model and should not be released by the driver. Remove the erroneous of_node_put() to prevent premature freeing.</p> https://vulnerability.circl.lu/vuln/cve-2026-45989