CVE-2026-45939

gpib: Fix memory leak in ni_usb_init()

published May 27, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

gpib: Fix memory leak in ni_usb_init()

In ni_usb_init(), if ni_usb_setup_init() fails, the function returns

-EFAULT without freeing the allocated writes buffer, leading to a

memory leak.

Additionally, ni_usb_setup_init() returns 0 on failure, which causes

ni_usb_init() to return -EFAULT, an inappropriate error code for this

situation.

Fix the leak by freeing writes in the error path. Modify

ni_usb_setup_init() to return -EINVAL on failure and propagate this

error code in ni_usb_init().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-05-27T12:17Z
EPSS history
Timeline
  • 27 MAY 12:17Z
    gpib: Fix memory leak in ni_usb_init()
    cvelistv5