CVE-2026-31475
ASoC: sma1307: fix double free of devm_kzalloc() memory
Summary
ASoC: sma1307: fix double free of devm_kzalloc() memory
Original description
The description as published by the source.
In the Linux kernel, the following vulnerability has been resolved:
ASoC: sma1307: fix double free of devm_kzalloc() memory
A previous change added NULL checks and cleanup for allocation
failures in sma1307_setting_loaded().
However, the cleanup for mode_set entries is wrong. Those entries are
allocated with devm_kzalloc(), so they are device-managed resources and
must not be freed with kfree(). Manually freeing them in the error path
can lead to a double free when devres later releases the same memory.
Drop the manual kfree() loop and let devres handle the cleanup.
Affected packages
Linux
Kernel
[{"type":"ECOSYSTEM","events":[{"introduced":"6.15.0"},{"fixed":"6.18.21"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"6.19.11"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- BellSoft Alpaquita BELL-CVE-2026-31475 linux-lts Fixed in: 6.18.35-r1
- Debian DEBIAN-CVE-2026-31475 linux Fixed in: 6.19.11-1
- Ubuntu UBUNTU-CVE-2026-31475 linux-hwe-edge
References
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org
- web git.kernel.org