CVE-2026-80974: mfd: sm501: Fix potential memory leaks during remove
In the Linux kernel, the following vulnerability has been resolved:
mfd: sm501: Fix potential memory leaks during remove
The memory allocated for struct sm501devdata in sm501pciprobe() and sm501platprobe() is not freed by the corresponding remove functions sm501pciremove() and sm501platremove(). Fix that by adding a call to kfree().
Affected Software
Event History
Frequently Asked Questions
When can the memory leak occur?
The leak can occur when an SM501 device is removed after its driver was initialized through either the PCI probe path or the platform probe path. In affected code, the allocated struct sm501_devdata is not freed by the corresponding remove function.
What is required to trigger this issue?
An SM501 driver instance must be probed and subsequently removed. The provided information does not describe a remote attack path or any attacker-controlled input requirement.
What can be done if an update cannot be applied immediately?
Avoid repeated removal and reinitialization of affected SM501 devices or drivers where operationally possible, since each affected removal can leave allocated driver memory unreleased.