Home

Description

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 ("usb: ulpi: fix double free in ulpi_register_interface() error path") removed kfree(ulpi) from ulpi_register_interface() to fix a double-free when device_register() fails. But when ulpi_of_register() or ulpi_read_id() fail before device_register() is called, the ulpi allocation is leaked. Add kfree(ulpi) on both error paths to properly clean up the allocation.

PUBLISHED Reserved 2026-05-13 | Published 2026-05-28 | Updated 2026-06-01 | Assigner Linux

Product status

Default status
unaffected

2f70ba9dae13a190673cc3f9b4aad52179738f60 (git) before 0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c
affected

ee248e6e941e4f2e634df2bd43e5f1ef810ab6df (git) before f1b855c00988a9cb41134cab7cf9faedba775dd9
affected

272a9b26c336a295e4e209157fed809706c1b1f7 (git) before 7bd61ed0bf9f4f1f2673d489b3bda1555b48d054
affected

aaeae6533d77e6ed4def85baec01e2815ebbef61 (git) before b0c0d44adb55c66663886cb6e30ee92cbb0f5385
affected

8763f8317bb389aded32a32b08f6751cfff657d2 (git) before be2c1d825f54277472c87019e82013ac534ddc4c
affected

38c28fe25611099230f0965c925499bfcf46a795 (git) before 2a71e01b2cf9b4329ff67102c1bea7448c2a2d2d
affected

01af542392b5d41fd659d487015a71f627accce3 (git) before f30ccfc2985590b33a23a3d8bed7ca16c0af551b
affected

01af542392b5d41fd659d487015a71f627accce3 (git) before 0b9fcab1b8608d429e5f239afb197de928d4de7d
affected

a6e5461f076c2ef63159f18e5cdbd30b50f0bc15 (git)
affected

5.10.253 (semver) before 5.10.258
affected

5.15.203 (semver) before 5.15.209
affected

6.1.168 (semver) before 6.1.175
affected

6.6.134 (semver) before 6.6.140
affected

6.12.81 (semver) before 6.12.88
affected

6.18.22 (semver) before 6.18.30
affected

6.19.12 (semver) before 6.20
affected

Default status
affected

7.0
affected

Any version before 7.0
unaffected

5.10.258 (semver)
unaffected

5.15.209 (semver)
unaffected

6.1.175 (semver)
unaffected

6.6.140 (semver)
unaffected

6.12.88 (semver)
unaffected

6.18.30 (semver)
unaffected

7.0.7 (semver)
unaffected

7.1-rc3 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c

git.kernel.org/...c/f1b855c00988a9cb41134cab7cf9faedba775dd9

git.kernel.org/...c/7bd61ed0bf9f4f1f2673d489b3bda1555b48d054

git.kernel.org/...c/b0c0d44adb55c66663886cb6e30ee92cbb0f5385

git.kernel.org/...c/be2c1d825f54277472c87019e82013ac534ddc4c

git.kernel.org/...c/2a71e01b2cf9b4329ff67102c1bea7448c2a2d2d

git.kernel.org/...c/f30ccfc2985590b33a23a3d8bed7ca16c0af551b

git.kernel.org/...c/0b9fcab1b8608d429e5f239afb197de928d4de7d

cve.org (CVE-2026-46109)

nvd.nist.gov (CVE-2026-46109)

Download JSON