Description

In the Linux kernel, the following vulnerability has been resolved: nvmem: core: fix use-after-free bugs in error paths Fix several instances of error paths in which we call __nvmem_device_put() - which may end up freeing the underlying memory and other resources - and then keep on using the nvmem structure. Always put the reference to the nvmem device as the last step before returning the error code.

Affected products

VendorProductVersions
LinuxLinuxe888d445ac33a5b0288d670ecd970908b13f07cd to <e0d38bf47a72da2f02c9fa6f752cd66d977cd7f7; e888d445ac33a5b0288d670ecd970908b13f07cd to <cb85ef5a227b3662b88f4d849a1aad43bfe7f5ae; e888d445ac33a5b0288d670ecd970908b13f07cd to <40e2a459c0dd1333b2343831480a0ad80dc07614; e888d445ac33a5b0288d670ecd970908b13f07cd to <5b6b6fc491899d583eaa75344e094796ae9b530b
LinuxLinux4.20; 0 to <4.20; 6.12.94 to <=6.12.*; 6.18.36 to <=6.18.*; 7.0.13 to <=7.0.*; 7.1 to <=*

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 25 Jun 2026 10:14 UTC.