CVE-2026-43196
HIGHsoc: ti: pruss: Fix double free in pruss_clk_mux_setup()
Title source: cnaDescription
In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in pruss_clk_mux_setup() In the pruss_clk_mux_setup(), the devm_add_action_or_reset() indirectly calls pruss_of_free_clk_provider(), which calls of_node_put(clk_mux_np) on the error path. However, after the devm_add_action_or_reset() returns, the of_node_put(clk_mux_np) is called again, causing a double free. Fix by returning directly, to avoid the duplicate of_node_put().
References (8)
Core 8
Core References
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
2.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-415
Status
published
Products (19)
Linux/Linux
< 5.10
Linux/Linux
5.10
Linux/Linux
5.10.252 - 5.10.*
Linux/Linux
5.15.202 - 5.15.*
Linux/Linux
6.1.165 - 6.1.*
Linux/Linux
6.12.75 - 6.12.*
Linux/Linux
6.18.16 - 6.18.*
Linux/Linux
6.19.6 - 6.19.*
Linux/Linux
6.6.128 - 6.6.*
Linux/Linux
7.0
... and 9 more
Published
May 06, 2026
Tracked Since
May 06, 2026