Riskcovery

CVE-2026-93069

OPP: Fix cleanup ordering

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

OPP: Fix cleanup ordering

Commit 173e02d67494 ("OPP: Initialize scope-based pointers inline") added initialization for all pointers. In some cases, the ordering was changed so that *opp_table was initialized after *opp. This also changes the order of the registered cleanup functions.

When the cleanup happens, this can cause use-after-free errors when the last reference is released and the release function _opp_kref_release tries to access the already freed opp->opp_table.

Initialize *opp_table before *opp again to fix this and ensure the correct cleanup order.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 173e02d674946ff3ef8da7f44a9d5b820b9af21c to before f0c4b7ca24d2e2618a70826881d69b237e36bcc0Affected
  • 173e02d674946ff3ef8da7f44a9d5b820b9af21c to before ce46fede7792cedd247e34b48bc8a02eb90c7848Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.