Severity
7.8HIGH
EPSS
0.0%
top 96.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 14
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/nvm: Fix double-free on aux add failure
After a successful auxiliary_device_init(), aux_dev->dev.release
(xe_nvm_release_dev()) is responsible for the kfree(nvm). When
there is failure with auxiliary_device_add(), driver will call
auxiliary_device_uninit(), which call put_device(). So that the
.release callback will be triggered to free the memory associated
with the auxiliary_device.
Move the kfree(nvm) into the auxil…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages3 packages
▶CVEListV5linux/linux7926ba2143d8fef40bb940232818c7363e33598c — 32887d8e4bc0696b3cb6c5915a42b39cfd3434f4+2
Patches
🔴Vulnerability Details
4VulDB▶
Linux Kernel up to 6.18.8 nvm drm/xe/ auxiliary_device_init double free (Nessus ID 299152 / WID-SEC-2026-0421)↗2026-04-13
OSV▶
CVE-2026-23162: In the Linux kernel, the following vulnerability has been resolved: drm/xe/nvm: Fix double-free on aux add failure After a successful auxiliary_device↗2026-02-14
GHSA▶
GHSA-phfr-35gx-vf86: In the Linux kernel, the following vulnerability has been resolved:
drm/xe/nvm: Fix double-free on aux add failure
After a successful auxiliary_devi↗2026-02-14