Vulnerability Details CVE-2026-46109
In the Linux kernel, the following vulnerability has been resolved:
usb: ulpi: fix memory leak on ulpi_register() error paths
Commit 01af542392b5 ("usb: ulpi: fix double free in
ulpi_register_interface() error path") removed kfree(ulpi) from
ulpi_register_interface() to fix a double-free when device_register()
fails.
But when ulpi_of_register() or ulpi_read_id() fail before
device_register() is called, the ulpi allocation is leaked.
Add kfree(ulpi) on both error paths to properly clean up the allocation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 2.4%
CVSS Severity
CVSS v3 Score 5.5
References
- https://git.kernel.org/stable/c/0b9fcab1b8608d429e5f239afb197de928d4de7d
- https://git.kernel.org/stable/c/0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c
- https://git.kernel.org/stable/c/2a71e01b2cf9b4329ff67102c1bea7448c2a2d2d
- https://git.kernel.org/stable/c/7bd61ed0bf9f4f1f2673d489b3bda1555b48d054
- https://git.kernel.org/stable/c/b0c0d44adb55c66663886cb6e30ee92cbb0f5385
- https://git.kernel.org/stable/c/be2c1d825f54277472c87019e82013ac534ddc4c
- https://git.kernel.org/stable/c/f1b855c00988a9cb41134cab7cf9faedba775dd9
- https://git.kernel.org/stable/c/f30ccfc2985590b33a23a3d8bed7ca16c0af551b
Products affected by CVE-2026-46109
-
cpe:2.3:o:linux:linux_kernel:5.10.253
-
cpe:2.3:o:linux:linux_kernel:5.10.254
-
cpe:2.3:o:linux:linux_kernel:5.10.255
-
cpe:2.3:o:linux:linux_kernel:5.10.256
-
cpe:2.3:o:linux:linux_kernel:5.10.257
-
cpe:2.3:o:linux:linux_kernel:5.15.203
-
cpe:2.3:o:linux:linux_kernel:5.15.204
-
cpe:2.3:o:linux:linux_kernel:5.15.205
-
cpe:2.3:o:linux:linux_kernel:5.15.207
-
cpe:2.3:o:linux:linux_kernel:5.15.208
-
cpe:2.3:o:linux:linux_kernel:6.1.168
-
cpe:2.3:o:linux:linux_kernel:6.1.169
-
cpe:2.3:o:linux:linux_kernel:6.1.170
-
cpe:2.3:o:linux:linux_kernel:6.1.171
-
cpe:2.3:o:linux:linux_kernel:6.1.173
-
cpe:2.3:o:linux:linux_kernel:6.1.174
-
cpe:2.3:o:linux:linux_kernel:6.12.81
-
cpe:2.3:o:linux:linux_kernel:6.12.82
-
cpe:2.3:o:linux:linux_kernel:6.12.83
-
cpe:2.3:o:linux:linux_kernel:6.12.84
-
cpe:2.3:o:linux:linux_kernel:6.12.85
-
cpe:2.3:o:linux:linux_kernel:6.12.86
-
cpe:2.3:o:linux:linux_kernel:6.12.87
-
cpe:2.3:o:linux:linux_kernel:6.18.22
-
cpe:2.3:o:linux:linux_kernel:6.18.23
-
cpe:2.3:o:linux:linux_kernel:6.18.24
-
cpe:2.3:o:linux:linux_kernel:6.18.25
-
cpe:2.3:o:linux:linux_kernel:6.18.26
-
cpe:2.3:o:linux:linux_kernel:6.18.27
-
cpe:2.3:o:linux:linux_kernel:6.18.28
-
cpe:2.3:o:linux:linux_kernel:6.18.29
-
cpe:2.3:o:linux:linux_kernel:6.19.12
-
cpe:2.3:o:linux:linux_kernel:6.19.13
-
cpe:2.3:o:linux:linux_kernel:6.19.14
-
cpe:2.3:o:linux:linux_kernel:6.6.134
-
cpe:2.3:o:linux:linux_kernel:6.6.135
-
cpe:2.3:o:linux:linux_kernel:6.6.136
-
cpe:2.3:o:linux:linux_kernel:6.6.137
-
cpe:2.3:o:linux:linux_kernel:6.6.138
-
cpe:2.3:o:linux:linux_kernel:6.6.139
-
cpe:2.3:o:linux:linux_kernel:7.0
-
cpe:2.3:o:linux:linux_kernel:7.0.1
-
cpe:2.3:o:linux:linux_kernel:7.0.2
-
cpe:2.3:o:linux:linux_kernel:7.0.3
-
cpe:2.3:o:linux:linux_kernel:7.0.4
-
cpe:2.3:o:linux:linux_kernel:7.0.5
-
cpe:2.3:o:linux:linux_kernel:7.0.6
-
cpe:2.3:o:linux:linux_kernel:7.1