news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-31759

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
5.5 Medium
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Risk score
44.0
Published
2026-05-01
Status
Published

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interface() error path When device_register() fails, ulpi_register() calls put_device() on ulpi->dev. The device release callback ulpi_dev_release() drops the OF node reference and frees ulpi, but the current error path in ulpi_register_interface() then calls kfree(ulpi) again, causing a double free. Let put_device() handle the cleanup through ulpi_dev_release() and avoid freeing ulpi again in ulpi_register_interface(). A flaw was found in the Linux kernel's USB ULPI (UTMI+ Low Pin Interface) driver. An error in the `ulpi_register_interface()` function's cleanup path can lead to a double free vulnerability. This occurs when `device_register()` fails, causing the `ulpi` structure to be freed twice. A local attacker could potentially exploit this to cause memory corruption or a denial of service, leading to system instability.

Weaknesses

CWE-1341

Coverage 6

Advisories and references