Riskcovery

CVE-2026-31745

reset: gpio: fix double free in reset_add_gpio_aux_device() error path

State
Published
Severity
Not scored
Published
May 1, 2026
Updated
May 11, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

reset: gpio: fix double free in reset_add_gpio_aux_device() error path

When __auxiliary_device_add() fails, reset_add_gpio_aux_device() calls auxiliary_device_uninit(adev).

The device release callback reset_gpio_aux_device_release() frees adev, but the current error path then calls kfree(adev) again, causing a double free.

Keep kfree(adev) for the auxiliary_device_init() failure path, but avoid freeing adev after auxiliary_device_uninit().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5fc4e4cf7a2268b5f73700fd1e8d02159f2417d8 to before 1de465753220deb41569cf2add87bbb0673731dbAffected
  • 5fc4e4cf7a2268b5f73700fd1e8d02159f2417d8 to before fbffb8c7c7bb4d38e9f65e0bee446685011de5d8Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 6.19.12 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.