Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-46109

In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 ("usb: ulpi: fix double free in ulpi_register_interface() error path") removed kfree(ulpi) from ulpi_register_interface() to fix a double-free when device_register() fails. But when ulpi_of_register() or ulpi_read_id() fail before device_register() is called, the ulpi allocation is leaked. Add kfree(ulpi) on both error paths to properly clean up th
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:081b1eb9f7a5095644f57a86a62c7a35a5e2ff632a68b379c02d802855b26ae3
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/common/ulpi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c","status":"affected","version":"2f70ba9dae13a190673cc3f9b4aad52179738f60","versionType":"git"},{"lessThan":"f1b855c00988a9cb41134cab7cf9faedba775dd9","status":"affected","version":"ee248e6e941e4f2e634df2bd43e5f1ef810ab6df","versionType":"git"},{"lessThan":"7bd61ed0bf9f4f1f2673d489b3bda1555b48d054","status":"affected","version":"272a9b26c336a295e4e2…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/common/ulpi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"7.0"},{"lessThan":"7.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/common/ulpi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c","status":"affected","version":"2f70ba9dae13a190673cc3f9b4aad52179738f60","versionType":"git"},{"lessThan":"f1b855c00988a9cb41134cab7cf9faedba775dd9","status":"affected","version":"ee248e6e941e4f2e634df2bd43e5f1ef810ab6df","versionType":"git"},{"lessThan":"7bd61ed0bf9f4f1f2673d489b3bda1555b48d054","status":"affected","version":"272a9b26c336a295e4e2…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/common/ulpi.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"7.0"},{"lessThan":"7.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0b9fcab1b8608d429e5f239afb197de928d4de7d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/2a71e01b2cf9b4329ff67102c1bea7448c2a2d2d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/7bd61ed0bf9f4f1f2673d489b3bda1555b48d054"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/b0c0d44adb55c66663886cb6e30ee92cbb0f5385"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/be2c1d825f54277472c87019e82013ac534ddc4c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/f1b855c00988a9cb41134cab7cf9faedba775dd9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/f30ccfc2985590b33a23a3d8bed7ca16c0af551b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:6be8b513c20f02b13e86704d16b8dce173e295ecaa9f464ce63997e4c5e1c5d2 · sha256:40464bb89a1a62c7… · /containers/cna/references/6

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer