CVE-2026-46162

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/05/2026
Last modified:
28/05/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ice: fix double free in ice_sf_eth_activate() error path<br /> <br /> When auxiliary_device_add() fails, ice_sf_eth_activate() jumps to<br /> aux_dev_uninit and calls auxiliary_device_uninit(&amp;sf_dev-&gt;adev).<br /> <br /> The device release callback ice_sf_dev_release() frees sf_dev, but<br /> the current error path falls through to sf_dev_free and calls<br /> kfree(sf_dev) again, causing a double free.<br /> <br /> Keep kfree(sf_dev) for the auxiliary_device_init() failure path, but<br /> avoid falling through to sf_dev_free after auxiliary_device_uninit().

Impact