CVE-2026-46109: usb: ulpi: fix memory leak on ulpi_register() error paths
In the Linux kernel, the following vulnerability has been resolved:
usb: ulpi: fix memory leak on ulpiregister() error paths
Commit 01af542392b5 ("usb: ulpi: fix double free in ulpiregisterinterface() error path") removed kfree(ulpi) from ulpiregisterinterface() to fix a double-free when deviceregister() fails.
But when ulpiofregister() or ulpireadid() fail before deviceregister() is called, the ulpi allocation is leaked.
Add kfree(ulpi) on both error paths to properly clean up the allocation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Operational
In usb: ulpi, add kfree(ulpi) on both error paths in ulpi_register_interface() so the ulpi allocation is properly cleaned up when ulpi_of_register() or ulpi_read_id() fail before device_register() is called (to prevent the allocation leak referenced for the error paths).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46109?
The severity of CVE-2026-46109 is medium with a score of 5.5.
How do I fix CVE-2026-46109?
To fix CVE-2026-46109, ensure you are using an updated version of the Linux kernel that includes the patch for this vulnerability.
What component is affected by CVE-2026-46109?
CVE-2026-46109 affects the USB ULPI interface in the Linux kernel.
What type of vulnerability is CVE-2026-46109?
CVE-2026-46109 is classified as a double free vulnerability.
When was CVE-2026-46109 published?
CVE-2026-46109 was published on May 28, 2026.