AZL-89022
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89022.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-89022
- Upstream
- Published
- 2026-05-28T10:16:26Z
- Modified
- 2026-08-28T17:46:38.906027491Z
- Summary
- CVE-2026-46109 affecting package kernel for versions less than 6.6.141.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
usb: ulpi: fix memory leak on ulpi_register() error paths
Commit 01af542392b5 ("usb: ulpi: fix double free in ulpiregisterinterface() error path") removed kfree(ulpi) from ulpiregisterinterface() to fix a double-free when device_register() fails.
But when ulpiofregister() or ulpireadid() fail before device_register() is called, the ulpi allocation is leaked.
Add kfree(ulpi) on both error paths to properly clean up the allocation.
- References