CVE-2026-64376

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> firmware_loader: fix device reference leak in firmware_upload_register()<br /> <br /> firmware_upload_register()<br /> -&gt; fw_create_instance()<br /> -&gt; device_initialize()<br /> <br /> After fw_create_instance() succeeds, the lifetime of the embedded struct<br /> device is expected to be managed through the device core reference<br /> counting, since fw_create_instance() has already called<br /> device_initialize().<br /> <br /> In firmware_upload_register(), if alloc_lookup_fw_priv() fails after<br /> fw_create_instance() succeeds, the code reaches free_fw_sysfs and frees<br /> fw_sysfs directly instead of releasing the device reference with<br /> put_device(). This may leave the reference count of the embedded struct<br /> device unbalanced, resulting in a refcount leak.<br /> <br /> The issue was identified by a static analysis tool I developed and<br /> confirmed by manual review. Fix this by using put_device(fw_dev) in the<br /> failure path and letting fw_dev_release() handle the final cleanup,<br /> instead of freeing the instance directly from the error path.