CVE-2026-31759

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-31759
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_interface() error path When device_register() fails, ulpi_register() calls put_device() on ulpi->dev. The device release callback ulpi_dev_release() drops the OF node reference and frees ulpi, but the current error path in ulpi_register_interface() then calls kfree(ulpi) again, causing a double free. Let put_device() handle the cleanup through ulpi_dev_release() and avoid freeing ulpi again in ulpi_register_interface().

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/01af542392b5d41fd659d487015a71f627accce3 Patch
https://git.kernel.org/stable/c/272a9b26c336a295e4e209157fed809706c1b1f7 Patch
https://git.kernel.org/stable/c/2f70ba9dae13a190673cc3f9b4aad52179738f60 Patch
https://git.kernel.org/stable/c/38c28fe25611099230f0965c925499bfcf46a795 Patch
https://git.kernel.org/stable/c/8763f8317bb389aded32a32b08f6751cfff657d2 Patch
https://git.kernel.org/stable/c/a6e5461f076c2ef63159f18e5cdbd30b50f0bc15 Patch
https://git.kernel.org/stable/c/aaeae6533d77e6ed4def85baec01e2815ebbef61 Patch
https://git.kernel.org/stable/c/ee248e6e941e4f2e634df2bd43e5f1ef810ab6df Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
History

08 May 2026, 18:20

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/01af542392b5d41fd659d487015a71f627accce3 - () https://git.kernel.org/stable/c/01af542392b5d41fd659d487015a71f627accce3 - Patch
References () https://git.kernel.org/stable/c/272a9b26c336a295e4e209157fed809706c1b1f7 - () https://git.kernel.org/stable/c/272a9b26c336a295e4e209157fed809706c1b1f7 - Patch
References () https://git.kernel.org/stable/c/2f70ba9dae13a190673cc3f9b4aad52179738f60 - () https://git.kernel.org/stable/c/2f70ba9dae13a190673cc3f9b4aad52179738f60 - Patch
References () https://git.kernel.org/stable/c/38c28fe25611099230f0965c925499bfcf46a795 - () https://git.kernel.org/stable/c/38c28fe25611099230f0965c925499bfcf46a795 - Patch
References () https://git.kernel.org/stable/c/8763f8317bb389aded32a32b08f6751cfff657d2 - () https://git.kernel.org/stable/c/8763f8317bb389aded32a32b08f6751cfff657d2 - Patch
References () https://git.kernel.org/stable/c/a6e5461f076c2ef63159f18e5cdbd30b50f0bc15 - () https://git.kernel.org/stable/c/a6e5461f076c2ef63159f18e5cdbd30b50f0bc15 - Patch
References () https://git.kernel.org/stable/c/aaeae6533d77e6ed4def85baec01e2815ebbef61 - () https://git.kernel.org/stable/c/aaeae6533d77e6ed4def85baec01e2815ebbef61 - Patch
References () https://git.kernel.org/stable/c/ee248e6e941e4f2e634df2bd43e5f1ef810ab6df - () https://git.kernel.org/stable/c/ee248e6e941e4f2e634df2bd43e5f1ef810ab6df - Patch
First Time Linux linux Kernel
Linux
CWE CWE-415
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8

01 May 2026, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-01 15:16

Updated : 2026-05-08 18:20

NVD link : CVE-2026-31759

Mitre link : CVE-2026-31759

CVE.ORG link : CVE-2026-31759

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-415

Double Free