PT-2026-43856 · Linux · Linux
Published
2026-05-27
·
Updated
2026-05-27
·
CVE-2026-45989
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
of: unittest: fix use-after-free in testdrv probe()
The function testdrv probe() retrieves the device node from the PCI
device, applies an overlay, and then immediately calls of node put(dn).
This releases the reference held by the PCI core, potentially freeing
the node if the reference count drops to zero. Later, the same freed
pointer 'dn' is passed to of platform default populate(), leading to a
use-after-free.
The reference to pdev->dev.of node is owned by the device model and
should not be released by the driver. Remove the erroneous of node put()
to prevent premature freeing.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux