CVE-2026-46285
kernel: mtd: docg3: fix use-after-free in docg3_release()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 8, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's mtd: docg3 module. The docg3_release() function attempts to access memory that has already been deallocated, leading to a use-after-free vulnerability. This issue could allow a local attacker to cause a denial of service or potentially execute arbitrary code.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference