most: core: fix leak on early registration failure (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.12 % · centile 2 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Modified
Description
In the Linux kernel, the following vulnerability has been resolved: most: core: fix leak on early registration failure A recent commit fixed a resource leak on early registration failures but for some reason left out the first error path which still leaks the resources associated with the interface. Fix up also the first error path so that the interface is always released on errors.
Faiblesses (CWE)
- CWE-401 — Mémoire non libérée après sa durée de vie utile
Références
- https://git.kernel.org/stable/c/04474009a2ea7aa27c67d323952a23bb16d5acc5
- https://git.kernel.org/stable/c/bbfe49ffb892bddf32c34bea95b7ff0fc30affb5
- https://git.kernel.org/stable/c/f1ba620f9e8d7291f80c0554e4b820f5fb30e819
- https://git.kernel.org/stable/c/5fd4396c2e48e90cc2597a86c18227d56ea845f0
- https://git.kernel.org/stable/c/2c198c272f9c9213b0fdf6b4a879f445c574f416
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2026-28601
- GCVE · GCVE-0-2026-43317
Avis du CERT-FR
- CERTFR-2026-AVI-0954 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0861 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0831 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.6 < 6.12.75cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.18.16cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.6cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 04474009a2ea7aa27c67d323952a23bb16d5acc5 ; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < bbfe49ffb892bddf32c34bea95b7ff0fc30affb5 ; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < f1ba620f9e8d7291f80c0554e4b820f5fb30e819 ; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 5fd4396c2e48e90cc2597a86c18227d56ea845f0 ; affected 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c < 2c198c272f9c9213b0fdf6b4a879f445c574f416 |
| Linux · Linux | affected 5.6 ; unaffected 0 < 5.6 ; unaffected 6.6.160 ≤ 6.6.* ; unaffected 6.12.75 ≤ 6.12.* ; unaffected 6.18.16 ≤ 6.18.* ; unaffected 6.19.6 ≤ 6.19.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |