CVE-2026-31475

kernel: ASoC: sma1307: fix double free of devm_kzalloc() memory

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 22, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's ASoC sma1307 component. An incorrect cleanup operation attempts to manually free memory that is already managed by the device resource management (devres) system. This can lead to a double free vulnerability, potentially causing memory corruption and system instability, which could result in a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-763 · Release of Invalid Pointer or Reference