In the Linux kernel, the following vulnerability has been resolved:
clk: Fix memory leak in devm_clk_notifier_register()
devm_clk_notifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't get unregistered on device detach and the allocated resource was leaked.
Fix the issue by registering the resource through devres_add().
This issue was found with kmemleak on a Chromebook.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.122-77.145Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.41-63.109Upgrade kernelUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headers | Oct 24, 2025 | Oct 7, 2025 |
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 14, 2025 | Oct 7, 2025 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linuxUpgrade linux-ibm-5.15Upgrade linux-gkeopUpgrade linux-nvidia-tegra-5.15Upgrade linux-riscv-5.15Upgrade linux-nvidia-tegraUpgrade linux-gkeUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-aws-5.15Upgrade linux-kvmUpgrade linux-azureUpgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-xilinx-zynqmpUpgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-intel-iotg-5.15Upgrade linux-raspiUpgrade linux-intel-iotgUpgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-ibmUpgrade linux-lowlatency-hwe-5.15 | Oct 10, 2025 | Oct 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub