CVE-2026-46162
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/05/2026
Last modified:
28/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ice: fix double free in ice_sf_eth_activate() error path<br />
<br />
When auxiliary_device_add() fails, ice_sf_eth_activate() jumps to<br />
aux_dev_uninit and calls auxiliary_device_uninit(&sf_dev->adev).<br />
<br />
The device release callback ice_sf_dev_release() frees sf_dev, but<br />
the current error path falls through to sf_dev_free and calls<br />
kfree(sf_dev) again, causing a double free.<br />
<br />
Keep kfree(sf_dev) for the auxiliary_device_init() failure path, but<br />
avoid falling through to sf_dev_free after auxiliary_device_uninit().



