CVE-2026-43328

cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path

State: Published
Severity: Not scored
Published: May 8, 2026
Updated: Jun 1, 2026
Reserved: May 1, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path

When kobject_init_and_add() fails, cpufreq_dbs_governor_init() calls kobject_put(&dbs_data->attr_set.kobj).

The kobject release callback cpufreq_dbs_data_release() calls gov->exit(dbs_data) and kfree(dbs_data), but the current error path then calls gov->exit(dbs_data) and kfree(dbs_data) again, causing a double free.

Keep the direct kfree(dbs_data) for the gov->init() failure path, but after kobject_init_and_add() has been called, let kobject_put() handle the cleanup through cpufreq_dbs_data_release().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 56bc91ee78babe9578585a2bc137abc4b3115ff3Affected 4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 4b9118e93d2499bb2808ef3742fa0ce06f4f8117Affected 4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 019ea28629720c220daedf38107c8787f330dc05Affected 4ebe36c94aed95de71a8ce6a6762226d31c938ee to before da39ee627fd82b52068d4d5f115749a8b7d271f9Affected 4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 427d048e4f6acbfa01b5a8062449fe0ee8987c0dAffected 4ebe36c94aed95de71a8ce6a6762226d31c938ee to before d2703b4f8fb7cc6f0dfdb2dc2359cc46189e7357Affected 4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 3bf9d023d2329a0e5379f2fd09d06ef09729cd9dAffected 4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 6dcf9d0064ce2f3e3dfe5755f98b93abe6a98e1eAffected e977b1477a6725868302957e6b5c330220391797Affected 5.1.6 to before 5.2Affected
LinuxLinux	5.2Affected before 5.2Not affected 5.10.253 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.168 through 6.1.Not affected 6.6.134 through 6.6.Not affected 6.12.81 through 6.12.Not affected 6.18.22 through 6.18.Not affected 6.19.12 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 56bc91ee78babe9578585a2bc137abc4b3115ff3Affected
4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 4b9118e93d2499bb2808ef3742fa0ce06f4f8117Affected
4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 019ea28629720c220daedf38107c8787f330dc05Affected
4ebe36c94aed95de71a8ce6a6762226d31c938ee to before da39ee627fd82b52068d4d5f115749a8b7d271f9Affected
4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 427d048e4f6acbfa01b5a8062449fe0ee8987c0dAffected
4ebe36c94aed95de71a8ce6a6762226d31c938ee to before d2703b4f8fb7cc6f0dfdb2dc2359cc46189e7357Affected
4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 3bf9d023d2329a0e5379f2fd09d06ef09729cd9dAffected
4ebe36c94aed95de71a8ce6a6762226d31c938ee to before 6dcf9d0064ce2f3e3dfe5755f98b93abe6a98e1eAffected
e977b1477a6725868302957e6b5c330220391797Affected
5.1.6 to before 5.2Affected

LinuxLinux

5.2Affected
before 5.2Not affected
5.10.253 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.168 through 6.1.*Not affected
6.6.134 through 6.6.*Not affected
6.12.81 through 6.12.*Not affected
6.18.22 through 6.18.*Not affected
6.19.12 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.