https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:54:25 +0000 https://vulnerability.circl.lu/vuln/cve-2026-72406 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: sungem: fix probe error cleanup</p> <p>gem_init_one() calls gem_remove_one() when register_netdev() fails. gem_remove_one() unregisters and frees resources owned by the net_device, including the DMA block, MMIO mapping, PCI regions, and the net_device itself. gem_init_one() then falls through to its own cleanup labels and frees the same resources again.</p> <p>Keep the register_netdev() error path in gem_init_one(): clear drvdata so PM/remove paths do not see a half-registered device, remove the NAPI instance added during probe, and let the existing cleanup labels release the resources once.</p> <p>The issue was found by a local static-analysis checker for probe error paths. The reported path was manually inspected before sending this fix.</p> <p>Compile-tested with CONFIG_SUNGEM=y. Runtime testing was not performed because no sungem hardware is available.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: sungem: fix probe error cleanup</p> <p>gem_init_one() calls gem_remove_one() when register_netdev() fails. gem_remove_one() unregisters and frees resources owned by the net_device, including the DMA block, MMIO mapping, PCI regions, and the net_device itself. gem_init_one() then falls through to its own cleanup labels and frees the same resources again.</p> <p>Keep the register_netdev() error path in gem_init_one(): clear drvdata so PM/remove paths do not see a half-registered device, remove the NAPI instance added during probe, and let the existing cleanup labels release the resources once.</p> <p>The issue was found by a local static-analysis checker for probe error paths. The reported path was manually inspected before sending this fix.</p> <p>Compile-tested with CONFIG_SUNGEM=y. Runtime testing was not performed because no sungem hardware is available.</p> https://vulnerability.circl.lu/vuln/cve-2026-72406