CVE-2026-43196

soc: ti: pruss: Fix double free in pruss_clk_mux_setup()

State: Published
Severity: Not scored
Published: May 6, 2026
Updated: May 11, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: ti: pruss: Fix double free in pruss_clk_mux_setup()

In the pruss_clk_mux_setup(), the devm_add_action_or_reset() indirectly calls pruss_of_free_clk_provider(), which calls of_node_put(clk_mux_np) on the error path. However, after the devm_add_action_or_reset() returns, the of_node_put(clk_mux_np) is called again, causing a double free.

Fix by returning directly, to avoid the duplicate of_node_put().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before dbda01bf2dfe5af33163e1e5fca1b82b619c2803Affected ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 24c40076e3bc3d73c839c886d6bda1da6c4d9b93Affected ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 818cf66d91c8ef09b01664a12d5f4ea786d64396Affected ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before e113339cc7d23be4948891f3a702e9dce5b47035Affected ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 69aa67c1e22d13e9aad4b08c86304ad8e743dcabAffected ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before b7db9953c2f8da37de498198623b05b46f8e2ca0Affected ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 04dbbb18cc9c8795c9ff47d8994bc03ebfef9d68Affected ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 80db65d4acfb9ff12d00172aed39ea8b98261aadAffected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.252 through 5.10.Not affected 5.15.202 through 5.15.Not affected 6.1.165 through 6.1.Not affected 6.6.128 through 6.6.Not affected 6.12.75 through 6.12.Not affected 6.18.16 through 6.18.Not affected 6.19.6 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before dbda01bf2dfe5af33163e1e5fca1b82b619c2803Affected
ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 24c40076e3bc3d73c839c886d6bda1da6c4d9b93Affected
ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 818cf66d91c8ef09b01664a12d5f4ea786d64396Affected
ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before e113339cc7d23be4948891f3a702e9dce5b47035Affected
ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 69aa67c1e22d13e9aad4b08c86304ad8e743dcabAffected
ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before b7db9953c2f8da37de498198623b05b46f8e2ca0Affected
ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 04dbbb18cc9c8795c9ff47d8994bc03ebfef9d68Affected
ba59c9b43c86b2c2396acac94e41d946cbaec9fe to before 80db65d4acfb9ff12d00172aed39ea8b98261aadAffected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.252 through 5.10.*Not affected
5.15.202 through 5.15.*Not affected
6.1.165 through 6.1.*Not affected
6.6.128 through 6.6.*Not affected
6.12.75 through 6.12.*Not affected
6.18.16 through 6.18.*Not affected
6.19.6 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.