CVE-2026-43196: soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
Published May 6, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
soc: ti: pruss: Fix double free in prussclkmuxsetup()
In the prussclkmuxsetup(), the devmaddactionorreset() indirectly calls prussoffreeclkprovider(), which calls ofnodeput(clkmuxnp) on the error path. However, after the devmaddactionorreset() returns, the ofnodeput(clkmuxnp) is called again, causing a double free.
Fix by returning directly, to avoid the duplicate ofnodeput().
Affected Software
8 affected components
Linux Linux kernel
Linux Linux kernel>=5.10<5.10.252
Linux Linux kernel>=5.11<5.15.202
Linux Linux kernel>=5.16<6.1.165
Linux Linux kernel>=6.2<6.6.128
Linux Linux kernel>=6.7<6.12.75
Linux Linux kernel>=6.13<6.18.16
Linux Linux kernel>=6.19<6.19.6
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In pruss_clk_mux_setup(), return directly after devm_add_action_or_reset() to avoid calling of_node_put(clk_mux_np) a second time.
Event History
May 6, 2026
CVE Published
via MITRE·11:28 AM
Data Sourced
via MITRE·11:28 AM
Description
Data Sourced
via NVD·12:16 PM
RemedyDescriptionSeverityWeaknessAffected Software