CVE-2026-46109

usb: ulpi: fix memory leak on ulpi_register() error paths

State: Published
Severity: Not scored
Published: May 28, 2026
Updated: Jun 14, 2026
Reserved: May 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

usb: ulpi: fix memory leak on ulpi_register() error paths

Commit 01af542392b5 ("usb: ulpi: fix double free in ulpi_register_interface() error path") removed kfree(ulpi) from ulpi_register_interface() to fix a double-free when device_register() fails.

But when ulpi_of_register() or ulpi_read_id() fail before device_register() is called, the ulpi allocation is leaked.

Add kfree(ulpi) on both error paths to properly clean up the allocation.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	2f70ba9dae13a190673cc3f9b4aad52179738f60 to before 0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6cAffected ee248e6e941e4f2e634df2bd43e5f1ef810ab6df to before f1b855c00988a9cb41134cab7cf9faedba775dd9Affected 272a9b26c336a295e4e209157fed809706c1b1f7 to before 7bd61ed0bf9f4f1f2673d489b3bda1555b48d054Affected aaeae6533d77e6ed4def85baec01e2815ebbef61 to before b0c0d44adb55c66663886cb6e30ee92cbb0f5385Affected 8763f8317bb389aded32a32b08f6751cfff657d2 to before be2c1d825f54277472c87019e82013ac534ddc4cAffected 38c28fe25611099230f0965c925499bfcf46a795 to before 2a71e01b2cf9b4329ff67102c1bea7448c2a2d2dAffected 01af542392b5d41fd659d487015a71f627accce3 to before f30ccfc2985590b33a23a3d8bed7ca16c0af551bAffected 01af542392b5d41fd659d487015a71f627accce3 to before 0b9fcab1b8608d429e5f239afb197de928d4de7dAffected a6e5461f076c2ef63159f18e5cdbd30b50f0bc15Affected 5.10.253 to before 5.10.258Affected 5.15.203 to before 5.15.209Affected 6.1.168 to before 6.1.175Affected 6.6.134 to before 6.6.140Affected 6.12.81 to before 6.12.88Affected 6.18.22 to before 6.18.30Affected 6.19.12 to before 6.20Affected
LinuxLinux	7.0Affected before 7.0Not affected 5.10.258 through 5.10.Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.140 through 6.6.Not affected 6.12.88 through 6.12.Not affected 6.18.30 through 6.18.Not affected 7.0.7 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

2f70ba9dae13a190673cc3f9b4aad52179738f60 to before 0c2c0c6820fe96fa4be0a0499f8d3f3321b9af6cAffected
ee248e6e941e4f2e634df2bd43e5f1ef810ab6df to before f1b855c00988a9cb41134cab7cf9faedba775dd9Affected
272a9b26c336a295e4e209157fed809706c1b1f7 to before 7bd61ed0bf9f4f1f2673d489b3bda1555b48d054Affected
aaeae6533d77e6ed4def85baec01e2815ebbef61 to before b0c0d44adb55c66663886cb6e30ee92cbb0f5385Affected
8763f8317bb389aded32a32b08f6751cfff657d2 to before be2c1d825f54277472c87019e82013ac534ddc4cAffected
38c28fe25611099230f0965c925499bfcf46a795 to before 2a71e01b2cf9b4329ff67102c1bea7448c2a2d2dAffected
01af542392b5d41fd659d487015a71f627accce3 to before f30ccfc2985590b33a23a3d8bed7ca16c0af551bAffected
01af542392b5d41fd659d487015a71f627accce3 to before 0b9fcab1b8608d429e5f239afb197de928d4de7dAffected
a6e5461f076c2ef63159f18e5cdbd30b50f0bc15Affected
5.10.253 to before 5.10.258Affected
5.15.203 to before 5.15.209Affected
6.1.168 to before 6.1.175Affected
6.6.134 to before 6.6.140Affected
6.12.81 to before 6.12.88Affected
6.18.22 to before 6.18.30Affected
6.19.12 to before 6.20Affected

LinuxLinux

7.0Affected
before 7.0Not affected
5.10.258 through 5.10.*Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.140 through 6.6.*Not affected
6.12.88 through 6.12.*Not affected
6.18.30 through 6.18.*Not affected
7.0.7 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.