https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 16:54:18 +0000 https://vulnerability.circl.lu/vuln/cve-2026-31759 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: ulpi: fix double free in ulpi_register_interface() error path</p> <p>When device_register() fails, ulpi_register() calls put_device() on ulpi-&gt;dev.</p> <p>The device release callback ulpi_dev_release() drops the OF node reference and frees ulpi, but the current error path in ulpi_register_interface() then calls kfree(ulpi) again, causing a double free.</p> <p>Let put_device() handle the cleanup through ulpi_dev_release() and avoid freeing ulpi again in ulpi_register_interface().</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>usb: ulpi: fix double free in ulpi_register_interface() error path</p> <p>When device_register() fails, ulpi_register() calls put_device() on ulpi-&gt;dev.</p> <p>The device release callback ulpi_dev_release() drops the OF node reference and frees ulpi, but the current error path in ulpi_register_interface() then calls kfree(ulpi) again, causing a double free.</p> <p>Let put_device() handle the cleanup through ulpi_dev_release() and avoid freeing ulpi again in ulpi_register_interface().</p> https://vulnerability.circl.lu/vuln/cve-2026-31759