Riskcovery

CVE-2026-45939

gpib: Fix memory leak in ni_usb_init()

State
Published
Severity
Not scored
Published
May 27, 2026
Updated
May 27, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

gpib: Fix memory leak in ni_usb_init()

In ni_usb_init(), if ni_usb_setup_init() fails, the function returns -EFAULT without freeing the allocated writes buffer, leading to a memory leak.

Additionally, ni_usb_setup_init() returns 0 on failure, which causes ni_usb_init() to return -EFAULT, an inappropriate error code for this situation.

Fix the leak by freeing writes in the error path. Modify ni_usb_setup_init() to return -EINVAL on failure and propagate this error code in ni_usb_init().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4e127de14fa78bcd98c6459b0b984b8266cd0203 to before 9c97fcfb7a62dea893104a046d544da8ac23370bAffected
  • 4e127de14fa78bcd98c6459b0b984b8266cd0203 to before c899d4b62c0757a280831e89c1f3801b597e8f38Affected
  • 4e127de14fa78bcd98c6459b0b984b8266cd0203 to before b89921eed8cf2d97250bac4be38dbcfbf048b586Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.18.14 through 6.18.*Not affected
  • 6.19.4 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.