Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43328

In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path When kobject_init_and_add() fails, cpufreq_dbs_governor_init() calls kobject_put(&dbs_data->attr_set.kobj). The kobject release callback cpufreq_dbs_data_release() calls gov->exit(dbs_data) and kfree(dbs_data), but the current error path then calls gov->exit(dbs_data) and kfree(dbs_data) again, causing a double free. Keep the direct kfree(dbs_data)
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:15d24de2a50a1138dd2f71e37e9581b11318413c98644b62dc22ec3136b1835d
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/cpufreq/cpufreq_governor.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.2"},{"lessThan":"5.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/cpufreq/cpufreq_governor.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"56bc91ee78babe9578585a2bc137abc4b3115ff3","status":"affected","version":"4ebe36c94aed95de71a8ce6a6762226d31c938ee","versionType":"git"},{"lessThan":"4b9118e93d2499bb2808ef3742fa0ce06f4f8117","status":"affected","version":"4ebe36c94aed95de71a8ce6a6762226d31c938ee","versionType":"git"},{"lessThan":"019ea28629720c220daedf38107c8787f330dc05","status":"affected","version":"4ebe36c94ae…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/cpufreq/cpufreq_governor.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.2"},{"lessThan":"5.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.253","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.168","versionType":"semver"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/cpufreq/cpufreq_governor.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"56bc91ee78babe9578585a2bc137abc4b3115ff3","status":"affected","version":"4ebe36c94aed95de71a8ce6a6762226d31c938ee","versionType":"git"},{"lessThan":"4b9118e93d2499bb2808ef3742fa0ce06f4f8117","status":"affected","version":"4ebe36c94aed95de71a8ce6a6762226d31c938ee","versionType":"git"},{"lessThan":"019ea28629720c220daedf38107c8787f330dc05","status":"affected","version":"4ebe36c94ae…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/019ea28629720c220daedf38107c8787f330dc05"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/3bf9d023d2329a0e5379f2fd09d06ef09729cd9d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/427d048e4f6acbfa01b5a8062449fe0ee8987c0d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/4b9118e93d2499bb2808ef3742fa0ce06f4f8117"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/56bc91ee78babe9578585a2bc137abc4b3115ff3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/6dcf9d0064ce2f3e3dfe5755f98b93abe6a98e1e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/d2703b4f8fb7cc6f0dfdb2dc2359cc46189e7357"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/da39ee627fd82b52068d4d5f115749a8b7d271f9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ad363c68592ae1f11058ef3776647b1e2a9553fc079f2cfbdb765410f53312a8 · sha256:feda535d48818548… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer