Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-45921

mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse()

Description

In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: Fix memory leak in mtd_parser_tplink_safeloader_parse() The function mtd_parser_tplink_safeloader_parse() allocates buf via mtd_parser_tplink_safeloader_read_table(). If the allocation for parts[idx].name fails inside the loop, the code jumps to the err_free label without freeing buf, leading to a memory leak. Fix this by freeing the temporary buffer buf in the err_free label. Compile tested only. Issue found using a prototype static analysis tool and code review.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 00a3588084bee6f37bb2b1d343f96900cfe049bc to < 0f5e62ea5c43146eacdc6861cb1022ffae1b79bcaffected
  • 00a3588084bee6f37bb2b1d343f96900cfe049bc to < e97f5fac8ce9a6b9ec724c97d86b0985e915fdcaaffected
  • 00a3588084bee6f37bb2b1d343f96900cfe049bc to < ec121ad626c319085f6d40a52cd04e99b4554926affected
  • 00a3588084bee6f37bb2b1d343f96900cfe049bc to < 971e9c53aed82f17a9c6a65daa4e21cc15eba5b1affected
  • 00a3588084bee6f37bb2b1d343f96900cfe049bc to < 980ce2b02dd06a4fdf5fee38b2e14becf9cf7b8baffected

Linux Linux

Default version status: affected

  • 6.2affected
  • 0 to < 6.2unaffected
  • 6.6.128 to ≤ 6.6.*unaffected
  • 6.12.75 to ≤ 6.12.*unaffected
  • 6.18.14 to ≤ 6.18.*unaffected
  • 6.19.4 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References