CVE-2026-45989

of: unittest: fix use-after-free in testdrv_probe()

published May 27, 2026

CVSS
—
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

of: unittest: fix use-after-free in testdrv_probe()

The function testdrv_probe() retrieves the device_node from the PCI

device, applies an overlay, and then immediately calls of_node_put(dn).

This releases the reference held by the PCI core, potentially freeing

the node if the reference count drops to zero. Later, the same freed

pointer 'dn' is passed to of_platform_default_populate(), leading to a

use-after-free.

The reference to pdev->dev.of_node is owned by the device model and

should not be released by the driver. Remove the erroneous of_node_put()

to prevent premature freeing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.1th percentile
Published
2026-05-27T12:55Z
EPSS history
Timeline
  • 27 MAY 12:55Z
    of: unittest: fix use-after-free in testdrv_probe()
    cvelistv5