CVE-2026-43196

soc: ti: pruss: Fix double free in pruss_clk_mux_setup()

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

soc: ti: pruss: Fix double free in pruss_clk_mux_setup()

In the pruss_clk_mux_setup(), the devm_add_action_or_reset() indirectly

calls pruss_of_free_clk_provider(), which calls of_node_put(clk_mux_np)

on the error path. However, after the devm_add_action_or_reset()

returns, the of_node_put(clk_mux_np) is called again, causing a double

free.

Fix by returning directly, to avoid the duplicate of_node_put().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Published
2026-05-06T11:28Z
EPSS history
Timeline
  • 06 MAY 11:28Z
    soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
    cvelistv5