https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 21:36:03 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68314 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: mctp i3c: clean up notifier and buses if driver register fails</p> <p>mctp_i3c_mod_init() registers the I3C bus notifier and then walks the existing buses with i3c_for_each_bus_locked(mctp_i3c_bus_add_new, NULL) before registering the I3C device driver. If i3c_driver_register() fails, the function returns the error directly, leaving the notifier registered and every mctp_i3c_bus object created for the existing buses allocated. The notifier is left pointing into the module that failed to load and the bus list is leaked.</p> <p>Mirror the module exit path on this failure: unregister the notifier and tear down the buses that were added before returning the error.</p> <p>This issue was identified during our ongoing static-analysis research while reviewing kernel code.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: mctp i3c: clean up notifier and buses if driver register fails</p> <p>mctp_i3c_mod_init() registers the I3C bus notifier and then walks the existing buses with i3c_for_each_bus_locked(mctp_i3c_bus_add_new, NULL) before registering the I3C device driver. If i3c_driver_register() fails, the function returns the error directly, leaving the notifier registered and every mctp_i3c_bus object created for the existing buses allocated. The notifier is left pointing into the module that failed to load and the bus list is leaked.</p> <p>Mirror the module exit path on this failure: unregister the notifier and tear down the buses that were added before returning the error.</p> <p>This issue was identified during our ongoing static-analysis research while reviewing kernel code.</p> https://vulnerability.circl.lu/vuln/cve-2026-68314