CVE-2026-46109

NONE EPSS 2.4%
Published May 28, 20261mo ago · Modified Jun 17, 20261w ago
Find Similar
Published May 28, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 ("usb: ulpi: fix double free in ulpi_register_interface() error path") removed kfree(ulpi) from ulpi_register_interface() to fix a double-free when device_register() fails. But when ulpi_of_register() or ulpi_read_id() fail before device_register() is called, the ulpi allocation is leaked. Add kfree(ulpi) on both error paths to properly clean up the allocation.

Threat Intelligence

EPSS Exploit Probability
2.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

References 8

  • git.kernel.org https://git.kernel.org/stable/c/0b9fcab1b8608d429e5f239afb197de928d4de7d
  • git.kernel.org https://git.kernel.org/stable/c/0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c
  • git.kernel.org https://git.kernel.org/stable/c/2a71e01b2cf9b4329ff67102c1bea7448c2a2d2d
  • git.kernel.org https://git.kernel.org/stable/c/7bd61ed0bf9f4f1f2673d489b3bda1555b48d054
  • git.kernel.org https://git.kernel.org/stable/c/b0c0d44adb55c66663886cb6e30ee92cbb0f5385
  • git.kernel.org https://git.kernel.org/stable/c/be2c1d825f54277472c87019e82013ac534ddc4c
  • git.kernel.org https://git.kernel.org/stable/c/f1b855c00988a9cb41134cab7cf9faedba775dd9
  • git.kernel.org https://git.kernel.org/stable/c/f30ccfc2985590b33a23a3d8bed7ca16c0af551b

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.