-
CVE-2026-93215
- EPSS 0.17%
- Veröffentlicht 24.09.2026 15:10:37
- Zuletzt bearbeitet 24.09.2026 16:17:16
- Erkennungen
cdx: Fix double free when sysfs file creation fails
In the Linux kernel, the following vulnerability has been resolved: cdx: Fix double free when sysfs file creation fails In cdx_create_res_attr(), if sysfs_create_bin_file() fails, the code frees res_attr but doesn't set cdx_dev->res_attr[num] to NULL. This leaves a dangling pointer in the array. Then cdx_destroy_res_attr() frees the already-freed memory. Fix the double free by initializing cdx_dev->res_attr[num] after sysfs_create_bin_file() completes.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
aeda33ab8160c7a2e24ba4f44492ad1e974ddc7d
Version <
88f4cd42a04bdadd189d7f667a4c279f4e962ca6
Status
affected
Version
aeda33ab8160c7a2e24ba4f44492ad1e974ddc7d
Version <
4cd24873ab9fdbd730604881a6e8087bc7b99336
Status
affected
Version
aeda33ab8160c7a2e24ba4f44492ad1e974ddc7d
Version <
7e9451bf0bdba6daee1eaf4e7566612af6ca1c32
Status
affected
Version
aeda33ab8160c7a2e24ba4f44492ad1e974ddc7d
Version <
6f4acc3a3c300e174e3f586b97b04ed8f5948c36
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
6.8
Status
affected
Version
0
Version <
6.8
Status
unaffected
Version <=
6.12.*
Version
6.12.109
Status
unaffected
Version <=
6.18.*
Version
6.18.50
Status
unaffected
Version <=
7.2.*
Version
7.2.4
Status
unaffected
Version <=
*
Version
7.3-rc1
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.054 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/88f4cd42a04bdadd189d7f667a4c279f4e962ca6
https://git.kernel.org/stable/c/4cd24873ab9fdbd730604881a6e8087bc7b99336
https://git.kernel.org/stable/c/7e9451bf0bdba6daee1eaf4e7566612af6ca1c32
https://git.kernel.org/stable/c/6f4acc3a3c300e174e3f586b97b04ed8f5948c36