Description
In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the set_sync() callback fails during DAI probe. Make sure to drop the reference on platform probe failures (e.g. probe deferral) and on driver unbind. This also avoids a potential use-after-free in case the DAI is ever reprobed without first rebinding the platform driver.
References (6)
Scores
CVSS v3
5.5
EPSS
0.0002
EPSS Percentile
4.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-401
Status
published
Products (22)
linux/Kernel
4.15.0 - 5.15.198linux
linux/Kernel
5.16.0 - 6.1.160linux
linux/Kernel
6.13.0 - 6.18.4linux
linux/Kernel
6.2.0 - 6.6.120linux
linux/Kernel
6.7.0 - 6.12.64linux
Linux/Linux
< 4.15
Linux/Linux
4.15
Linux/Linux
5.15.198 - 5.15.*
Linux/Linux
5914d285f6b782892a91d6621723fdc41a775b15 - 23261f0de09427367e99f39f588e31e2856a690e
Linux/Linux
5914d285f6b782892a91d6621723fdc41a775b15 - 3752afcc6d80d5525e236e329895ba2cb93bcb26
... and 12 more
Published
Jan 13, 2026
Tracked Since
Feb 18, 2026