CVE-2026-43328

cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path

published May 8, 2026

CVSS
—
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path

When kobject_init_and_add() fails, cpufreq_dbs_governor_init() calls

kobject_put(&dbs_data->attr_set.kobj).

The kobject release callback cpufreq_dbs_data_release() calls

gov->exit(dbs_data) and kfree(dbs_data), but the current error path

then calls gov->exit(dbs_data) and kfree(dbs_data) again, causing a

double free.

Keep the direct kfree(dbs_data) for the gov->init() failure path, but

after kobject_init_and_add() has been called, let kobject_put() handle

the cleanup through cpufreq_dbs_data_release().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Published
2026-05-08T13:31Z
EPSS history
Timeline
  • 08 MAY 13:31Z
    cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path
    cvelistv5