Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-46109

usb: ulpi: fix memory leak on ulpi_register() error paths

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 ("usb: ulpi: fix double free in ulpi_register_interface() error path") removed kfree(ulpi) from ulpi_register_interface() to fix a double-free when device_register() fails. But when ulpi_of_register() or ulpi_read_id() fail before device_register() is called, the ulpi allocation is leaked. Add kfree(ulpi) on both error paths to properly clean up the allocation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2f70ba9dae13a190673cc3f9b4aad52179738f60 to < 0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6caffected
  • ee248e6e941e4f2e634df2bd43e5f1ef810ab6df to < f1b855c00988a9cb41134cab7cf9faedba775dd9affected
  • 272a9b26c336a295e4e209157fed809706c1b1f7 to < 7bd61ed0bf9f4f1f2673d489b3bda1555b48d054affected
  • aaeae6533d77e6ed4def85baec01e2815ebbef61 to < b0c0d44adb55c66663886cb6e30ee92cbb0f5385affected
  • 8763f8317bb389aded32a32b08f6751cfff657d2 to < be2c1d825f54277472c87019e82013ac534ddc4caffected
  • 38c28fe25611099230f0965c925499bfcf46a795 to < 2a71e01b2cf9b4329ff67102c1bea7448c2a2d2daffected
  • 01af542392b5d41fd659d487015a71f627accce3 to < f30ccfc2985590b33a23a3d8bed7ca16c0af551baffected
  • 01af542392b5d41fd659d487015a71f627accce3 to < 0b9fcab1b8608d429e5f239afb197de928d4de7daffected
  • a6e5461f076c2ef63159f18e5cdbd30b50f0bc15affected
  • 5.10.253 to < 5.10.258affected
  • 5.15.203 to < 5.15.209affected
  • 6.1.168 to < 6.1.175affected
  • 6.6.134 to < 6.6.140affected
  • 6.12.81 to < 6.12.88affected
  • 6.18.22 to < 6.18.30affected
  • 6.19.12 to < 6.20affected

Linux Linux

Default version status: affected

  • 7.0affected
  • 0 to < 7.0unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.140 to ≤ 6.6.*unaffected
  • 6.12.88 to ≤ 6.12.*unaffected
  • 6.18.30 to ≤ 6.18.*unaffected
  • 7.0.7 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References