CVE-2026-68314

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: mctp i3c: clean up notifier and buses if driver register fails<br /> <br /> mctp_i3c_mod_init() registers the I3C bus notifier and then walks the<br /> existing buses with i3c_for_each_bus_locked(mctp_i3c_bus_add_new, NULL)<br /> before registering the I3C device driver. If i3c_driver_register()<br /> fails, the function returns the error directly, leaving the notifier<br /> registered and every mctp_i3c_bus object created for the existing buses<br /> allocated. The notifier is left pointing into the module that failed to<br /> load and the bus list is leaked.<br /> <br /> Mirror the module exit path on this failure: unregister the notifier and<br /> tear down the buses that were added before returning the error.<br /> <br /> This issue was identified during our ongoing static-analysis research while<br /> reviewing kernel code.