CVE-2026-45989: of: unittest: fix use-after-free in testdrv_probe()
In the Linux kernel, the following vulnerability has been resolved:
of: unittest: fix use-after-free in testdrvprobe()
The function testdrvprobe() retrieves the devicenode from the PCI device, applies an overlay, and then immediately calls ofnodeput(dn). This releases the reference held by the PCI core, potentially freeing the node if the reference count drops to zero. Later, the same freed pointer 'dn' is passed to ofplatformdefaultpopulate(), leading to a use-after-free.
The reference to pdev->dev.ofnode is owned by the device model and should not be released by the driver. Remove the erroneous ofnodeput() to prevent premature freeing.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Upgrade
Upgrade
Linux kernel (of: unittest: fix use-after-free in testdrv_probe)to a version that resolves this vulnerability.Patch of: unittest: fix use-after-free in testdrv_probe()
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45989?
The severity of CVE-2026-45989 is rated at 44.
What is CVE-2026-45989 related to?
CVE-2026-45989 is related to a use-after-free vulnerability in the Linux kernel's testdrv_probe() function.
How do I fix CVE-2026-45989?
To fix CVE-2026-45989, update to the patched version of the Linux kernel provided by the Linux Foundation.
How does CVE-2026-45989 impact system security?
CVE-2026-45989 can potentially lead to system instability and unauthorized access due to improper memory handling.
What is the function involved in CVE-2026-45989?
The function involved in CVE-2026-45989 is testdrv_probe() within the Linux kernel.