PT-2026-44285 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-06-04 · CVE-2026-46162

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0.11-1.1

Description A double free issue exists in the Linux kernel within the ice sf eth activate() function. When auxiliary device add() fails, the execution jumps to aux dev uninit and calls auxiliary device uninit(&sf dev->adev). The device release callback ice sf dev release() frees sf dev, but the error path continues to sf dev free, which calls kfree(sf dev) again.

Recommendations Update to version 7.0.11-1.1 or later.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2026-46162

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 288

• https://git.kernel.org/stable/c/2ca30340b5028ddc3f17086a538feeff06167b1b · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-46162 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-46162 · Vendor Advisory
• https://git.kernel.org/stable/c/121d1f253aed515cd85748f68c664a6cb756e8ad · Patch
• https://cve.org/CVERecord?id=CVE-2026-46162 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46162 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46162 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46162 · Vendor Advisory
• https://git.kernel.org/stable/c/9aab1c3d7299285e2569cbc0ed5892d631a241b2 · Patch
• https://ubuntu.com/security/CVE-2026-46162 · Vendor Advisory
• https://git.kernel.org/stable/c/d0c6a4816609f145ffcc74e64baa214c571c17c6 · Patch
• https://suse.com/security/cve/CVE-2026-46217 · Note
• https://suse.com/security/cve/CVE-2026-46092 · Note
• https://suse.com/security/cve/CVE-2026-46144 · Note