CVE-2026-45981

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> s390/cio: Fix device lifecycle handling in css_alloc_subchannel()<br /> <br /> `css_alloc_subchannel()` calls `device_initialize()` before setting up<br /> the DMA masks. If `dma_set_coherent_mask()` or `dma_set_mask()` fails,<br /> the error path frees the subchannel structure directly, bypassing<br /> the device model reference counting.<br /> <br /> Once `device_initialize()` has been called, the embedded struct device<br /> must be released via `put_device()`, allowing the release callback to<br /> free the container structure.<br /> <br /> Fix the error path by dropping the initial device reference with<br /> `put_device()` instead of calling `kfree()` directly.<br /> <br /> This ensures correct device lifetime handling and avoids potential<br /> use-after-free or double-free issues.