https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:15:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-12526 bdu:2026-12526 https://cve.radiocsirt.org/vuln/bdu:2026-12526 https://cve.radiocsirt.org/vuln/bell-cve-2026-31475 <p><strong>Affected:</strong> Alpaquita:stream: linux-lts</p> <p><strong>Affected:</strong> Alpaquita:stream: linux-lts</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-31475 https://cve.radiocsirt.org/vuln/euvd-2026-347693 EUVD-2026-347693 https://cve.radiocsirt.org/vuln/euvd-2026-347693 https://cve.radiocsirt.org/vuln/fkie_cve-2026-31475 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: sma1307: fix double free of devm_kzalloc() memory</p> <p>A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded().</p> <p>However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory.</p> <p>Drop the manual kfree() loop and let devres handle the cleanup.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: sma1307: fix double free of devm_kzalloc() memory</p> <p>A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded().</p> <p>However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory.</p> <p>Drop the manual kfree() loop and let devres handle the cleanup.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-31475 https://cve.radiocsirt.org/vuln/ghsa-9f2p-rpvq-5gc2 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: sma1307: fix double free of devm_kzalloc() memory</p> <p>A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded().</p> <p>However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory.</p> <p>Drop the manual kfree() loop and let devres handle the cleanup.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ASoC: sma1307: fix double free of devm_kzalloc() memory</p> <p>A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded().</p> <p>However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory.</p> <p>Drop the manual kfree() loop and let devres handle the cleanup.</p> https://cve.radiocsirt.org/vuln/ghsa-9f2p-rpvq-5gc2 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31475 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 106 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: fix double free of devm_kzalloc() memory A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded(). However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory. Drop the manual kfree() loop and let devres handle the cleanup.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 106 more</p> <p>In the Linux kernel, the following vulnerability has been resolved: ASoC: sma1307: fix double free of devm_kzalloc() memory A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded(). However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory. Drop the manual kfree() loop and let devres handle the cleanup.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-31475 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1252 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, andere nicht näher spezifizierte Auswirkungen zu verursachen und möglicherweise Code auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Informationen offenzulegen, andere nicht näher spezifizierte Auswirkungen zu verursachen und möglicherweise Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1252