https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 16:31:38 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74706 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bnge: Fix NULL pointer dereference in aux device release</p> <p>If allocation of auxr_dev fails during auxiliary device setup, the error path calls auxiliary_device_uninit(), which eventually invokes bnge_aux_dev_release().</p> <p>The release callback unconditionally dereferences aux_priv-&gt;auxr_dev-&gt;pdev to retrieve the parent bnge_dev. Since auxr_dev has not yet been allocated on this failure path, the dereference results in a NULL pointer exception</p> <p>Retrieve the parent bnge_dev from the auxiliary device&#39;s parent instead of auxr_dev, and free auxr_dev only when it was successfully allocated. This allows the release callback to correctly clean up partially initialized auxiliary devices.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>bnge: Fix NULL pointer dereference in aux device release</p> <p>If allocation of auxr_dev fails during auxiliary device setup, the error path calls auxiliary_device_uninit(), which eventually invokes bnge_aux_dev_release().</p> <p>The release callback unconditionally dereferences aux_priv-&gt;auxr_dev-&gt;pdev to retrieve the parent bnge_dev. Since auxr_dev has not yet been allocated on this failure path, the dereference results in a NULL pointer exception</p> <p>Retrieve the parent bnge_dev from the auxiliary device&#39;s parent instead of auxr_dev, and free auxr_dev only when it was successfully allocated. This allows the release callback to correctly clean up partially initialized auxiliary devices.</p> https://vulnerability.circl.lu/vuln/cve-2026-74706