PT-2026-47379 · Linux · Linux Kernel

Published 2026-06-08 · Updated 2026-06-08 · CVE-2026-46308

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the scpsys get bus protection legacy() function. The of find node with property() function returns a device node with an incremented reference count, but of node put(node) is called before verifying if syscon regmap lookup by phandle() returns an error. If an error occurs, dev err probe() attempts to dereference the node pointer to print diagnostic information; however, the node memory may have already been freed, leading to the use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-46308

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-46308 · Security Note
• https://git.kernel.org/stable/c/38d8410021b55d226847b2ac8d189d89fe5a8866 · Note
• https://twitter.com/vuldb/status/2064054507223548378 · Twitter Post
• https://t.me/CVEtracker/56181 · Telegram Post
• https://git.kernel.org/stable/c/ec1fcddb3117d9452210e838fd37389ee61e10e8 · Note
• https://git.kernel.org/stable/c/cb27e43c0511e9e1ca8818d231656070b11c18cf · Note