https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 06:37:12 +0000 https://vulnerability.circl.lu/vuln/cve-2026-72245 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path</p> <p>After device_initialize(), the embedded struct device in struct host1x_device should be released through the device core with put_device().</p> <p>In host1x_device_add(), if host1x_device_parse_dt() fails, the current error path frees the object directly with kfree(device). That bypasses the normal device lifetime handling and leaks the reference held on the embedded struct device.</p> <p>The issue was identified by a static analysis tool I developed and confirmed by manual review.</p> <p>Fix this by using put_device() in the host1x_device_parse_dt() failure path.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path</p> <p>After device_initialize(), the embedded struct device in struct host1x_device should be released through the device core with put_device().</p> <p>In host1x_device_add(), if host1x_device_parse_dt() fails, the current error path frees the object directly with kfree(device). That bypasses the normal device lifetime handling and leaks the reference held on the embedded struct device.</p> <p>The issue was identified by a static analysis tool I developed and confirmed by manual review.</p> <p>Fix this by using put_device() in the host1x_device_parse_dt() failure path.</p> https://vulnerability.circl.lu/vuln/cve-2026-72245