https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:35:37 +0000 https://vulnerability.circl.lu/vuln/cve-2026-72058 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: ixp4xx_hss: fix duplicate HDLC netdev allocation</p> <p>ixp4xx_hss_probe() allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered with register_hdlc_device(). The second one is stored in port-&gt;netdev and later used by the remove path for unregister_hdlc_device() and free_netdev().</p> <p>This means that the registered netdev is not the same object that is unregistered and freed on remove. It also leaks the first allocation if the second alloc_hdlcdev() call fails, and the first allocation is not checked before ndev is used.</p> <p>Older code allocated the HDLC netdev only once and stored the same object in both the local variable and port-&gt;netdev. The buggy conversion split this into two alloc_hdlcdev() calls. A later rename changed the local variable name to ndev, but the underlying mismatch remained.</p> <p>Fix this by allocating the HDLC netdev only once and assigning the same object to port-&gt;netdev.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: ixp4xx_hss: fix duplicate HDLC netdev allocation</p> <p>ixp4xx_hss_probe() allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered with register_hdlc_device(). The second one is stored in port-&gt;netdev and later used by the remove path for unregister_hdlc_device() and free_netdev().</p> <p>This means that the registered netdev is not the same object that is unregistered and freed on remove. It also leaks the first allocation if the second alloc_hdlcdev() call fails, and the first allocation is not checked before ndev is used.</p> <p>Older code allocated the HDLC netdev only once and stored the same object in both the local variable and port-&gt;netdev. The buggy conversion split this into two alloc_hdlcdev() calls. A later rename changed the local variable name to ndev, but the underlying mismatch remained.</p> <p>Fix this by allocating the HDLC netdev only once and assigning the same object to port-&gt;netdev.</p> https://vulnerability.circl.lu/vuln/cve-2026-72058