CVE-2026-74706

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> bnge: Fix NULL pointer dereference in aux device release<br /> <br /> If allocation of auxr_dev fails during auxiliary device setup, the error<br /> path calls auxiliary_device_uninit(), which eventually invokes<br /> bnge_aux_dev_release().<br /> <br /> The release callback unconditionally dereferences aux_priv-&gt;auxr_dev-&gt;pdev<br /> to retrieve the parent bnge_dev. Since auxr_dev has not yet been allocated<br /> on this failure path, the dereference results in a NULL pointer exception<br /> <br /> Retrieve the parent bnge_dev from the auxiliary device&amp;#39;s parent instead of<br /> auxr_dev, and free auxr_dev only when it was successfully allocated. This<br /> allows the release callback to correctly clean up partially initialized<br /> auxiliary devices.