In the Linux kernel, the following vulnerability has been resolved:
nvmem: core: Fix memleak in nvmem_register()
dev_set_name will alloc memory for nvmem->dev.kobj.name in nvmem_register, when nvmem_validate_keepouts failed, nvmem's memory will be freed and return, but nobody will free memory for nvmem->dev.kobj.name, there will be memleak, so moving nvmem_validate_keepouts() after device_register() and let the device core deal with cleaning name in error cases.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Dec 29, 2025 | Dec 29, 2025 |
| Ubuntu | — | Upgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-bluefieldUpgrade linuxUpgrade linux-lowlatencyUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-kvmUpgrade linux-azure-5.15Upgrade linux-raspiUpgrade linux-gcp-5.15Upgrade linux-gkeopUpgrade linux-nvidiaUpgrade linux-intel-iotg-5.15Upgrade linux-oracleUpgrade linux-azureUpgrade linux-realtimeUpgrade linux-intel-iotgUpgrade linux-hwe-5.15 | Jan 6, 2026 | Dec 24, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub