CVE-2026-89582: fallo en Linux
bnx2x: fix double free in bnx2x_init_firmware() error path
Publicada el · Actualizada el
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 0.2%
probabilidad de explotación
0.2%top 93% de las CVE
explotación observada
noninguna fuente lo reporta
In the Linux kernel, the following vulnerability has been resolved:
bnx2x: fix double free in bnx2x_init_firmware() error path
bnx2x_init_firmware() frees bp->init_ops, bp->init_data and
bp->init_ops_offsets in its error path without setting them to NULL.
The cleanup function bnx2x_release_firmware() frees the same three
pointers unconditionally, so if init_firmware fails and
release_firmware is later called (e.g. from __bnx2x_remove or through
the function state machine), all three are freed a second time.
Set each pointer to NULL after kfree() in the error path so that the
subsequent kfree(NULL) in bnx2x_release_firmware() is a safe no-op.
Productos afectados
Linux · LinuxCVEs relacionadas — Linux
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2024-53150HIGHALSA: usb-audio: Fix out of bounds reads when finding clock sourcesEPSS 1.4%KEV
Referencias
https://git.kernel.org/stable/c/07d4516e3eb1fcde4a5db29eb556cdb0ebba6265https://git.kernel.org/stable/c/4d36e38e48340a1ccf92a98c7a22d07a954e5aa3https://git.kernel.org/stable/c/770715784b689749014ce193ef986b706fe8f51chttps://git.kernel.org/stable/c/a142c024f07d623e2b6b25943f6c36d4b6b0b4c6https://git.kernel.org/stable/c/ac280f6872e75df49f3004505bcddff91d9e5362https://git.kernel.org/stable/c/c44e5d6c3189241d5f791bc7b1eddde6b92f802chttps://git.kernel.org/stable/c/d2796ffe38cb4155afe0eab23636295b096c27a5https://git.kernel.org/stable/c/dc98e727b9cfc5e19c796bf893878153f00b222b