7.8

CVE-2026-64246

power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()

In the Linux kernel, the following vulnerability has been resolved:

power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()

Move of_node_put(dn) after the of_match_node() call, which still needs
the node pointer. The node reference is correctly released after use.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version >= 5.15 < 5.15.211
LinuxLinux Kernel Version >= 5.16 < 6.1.177
LinuxLinux Kernel Version >= 6.2 < 6.6.144
LinuxLinux Kernel Version >= 6.7 < 6.12.95
LinuxLinux Kernel Version >= 6.13 < 6.18.38
LinuxLinux Kernel Version >= 6.19 < 7.1.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.02
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://git.kernel.org/stable/c/93c7ee139721936b6fa717572e74d3994603ae13
Patch
https://git.kernel.org/stable/c/cdda7d384c05485a232ae9a849f6445accb095bf
Patch
https://git.kernel.org/stable/c/c04d606f8b35ee7d3ed243f63893a607e9d6c0bc
Patch
https://git.kernel.org/stable/c/3928ae803dee044b01076c478c279c0bd54164cd
Patch
https://git.kernel.org/stable/c/2205275be9be981e70ff29610b0117d8853fac70
Patch
https://git.kernel.org/stable/c/d109e72f3fbccb540473285d17d7519584f7f76e
Patch
https://git.kernel.org/stable/c/8eec545cde69e46e9a1d2b7d915ce4f5df85b3bd
Patch