CVE-2026-93215

cdx: Fix double free when sysfs file creation fails

N/A
Published: September 24, 2026 at 03:10 PM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: cdx: Fix double free when sysfs file creation fails In cdx_create_res_attr(), if sysfs_create_bin_file() fails, the code frees res_attr but doesn't set cdx_dev->res_attr[num] to NULL. This leaves a dangling pointer in the array. Then cdx_destroy_res_attr() frees the already-freed memory. Fix the double free by initializing cdx_dev->res_attr[num] after sysfs_create_bin_file() completes.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.8aeda33ab8160c7a2e24ba4f44492ad1e974ddc7d
Vendor states this is fixed in 4cd24873ab9fdbd730604881a6e8087bc7b99336 (fixed)
Vendor states this is fixed in 6f4acc3a3c300e174e3f586b97b04ed8f5948c36 (fixed)
Vendor states this is fixed in 7e9451bf0bdba6daee1eaf4e7566612af6ca1c32 (fixed)
Vendor states this is fixed in 88f4cd42a04bdadd189d7f667a4c279f4e962ca6 (fixed)
Vendor states this is fixed in 6.12.109 (unaffected)
Vendor states this is fixed in 6.18.50 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)
Vendor states this is fixed in 7.2.4 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card