Riskcovery

CVE-2026-31475

ASoC: sma1307: fix double free of devm_kzalloc() memory

State
Published
Severity
7.8 High
Published
Apr 22, 2026
Updated
Aug 5, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: sma1307: fix double free of devm_kzalloc() memory

A previous change added NULL checks and cleanup for allocation failures in sma1307_setting_loaded().

However, the cleanup for mode_set entries is wrong. Those entries are allocated with devm_kzalloc(), so they are device-managed resources and must not be freed with kfree(). Manually freeing them in the error path can lead to a double free when devres later releases the same memory.

Drop the manual kfree() loop and let devres handle the cleanup.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0ec6bd16705fe21d6429d6b8f7981eae2142bba8 to before d472d1a52985211b92883bb64bbe710b45980190Affected
  • 0ec6bd16705fe21d6429d6b8f7981eae2142bba8 to before 1a82c3272626db9006f4c2cad3adf2916417aed6Affected
  • 0ec6bd16705fe21d6429d6b8f7981eae2142bba8 to before fe757092d2329c397ecb32f2bf68a5b1c4bd9193Affected
  • f8434b8ba437d3f6cbcd9ffe8405bd16ed28fc5cAffected
  • 6.14.9 to before 6.15Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.21 through 6.18.*Not affected
  • 6.19.11 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.