SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80974

UNKNOWN · CVSS N/A EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel, specifically the sm501 multi-function device driver, where memory allocated for the `struct sm501_devdata` is not properly freed during device removal. This oversight can lead to potential memory leaks, impacting system performance and stability over time. System administrators and developers using affected Linux distributions should prioritize applying the fix to mitigate these risks.

CVE
CVE-2026-80974
Severity
UNKNOWN
CVSS
N/A
EPSS
0.20%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions sm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to kfree().