PT-2026-34380 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-27 · CVE-2026-31475

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the ASoC sma1307 component. The sma1307 setting loaded() function incorrectly uses kfree() to manually release memory for mode set entries that were allocated using devm kzalloc(). Since devm kzalloc() creates device-managed resources, the system automatically attempts to release this memory later, leading to a double free condition when the manual cleanup is triggered in the error path.

Recommendations Remove the manual kfree() loop and allow the devres framework to handle the cleanup of device-managed resources.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2026-31475

Affected Products

Linux Kernel

References · 12

• https://git.kernel.org/stable/c/fe757092d2329c397ecb32f2bf68a5b1c4bd9193 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31475 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31475 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31475 · Vendor Advisory
• https://git.kernel.org/stable/c/d472d1a52985211b92883bb64bbe710b45980190 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31475 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31475 · Security Note
• https://git.kernel.org/stable/c/1a82c3272626db9006f4c2cad3adf2916417aed6 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31475 · Vendor Advisory
• https://git.kernel.org/linus/fe757092d2329c397ecb32f2bf68a5b1c4bd9193 · Note
• https://t.me/cveNotify/161163 · Telegram Post
• https://twitter.com/CVEnew/status/2046980008514592929 · Twitter Post