CVE-2026-53156

7.8 Élevée

Publiée le 25/06/2026 à 11:16 · Modifiée le 21/10/2026 à 15:19 · Modifiée · Source : 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Description

In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix use-after-free bugs in error paths Fix several instances of error paths in which we call __nvmem_device_put() - which may end up freeing the underlying memory and other resources - and then keep on using the nvmem structure. Always put the reference to the nvmem device as the last step before returning the error code.

Traduire en français

Produits concernés

Linux
Linux linux kernel

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.8 Élevée	nvd@nist.gov (NVD)	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-416

Références

https://git.kernel.org/stable/c/40e2a459c0dd1333b2343831480a0ad80dc07614 Patch
https://git.kernel.org/stable/c/5b6b6fc491899d583eaa75344e094796ae9b530b Patch
https://git.kernel.org/stable/c/6cdcf0d16c80900f42d60252480cd131c1a83d23
https://git.kernel.org/stable/c/cb85ef5a227b3662b88f4d849a1aad43bfe7f5ae Patch
https://git.kernel.org/stable/c/e0d38bf47a72da2f02c9fa6f752cd66d977cd7f7 Patch

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories