In the Linux kernel, the following vulnerability has been resolved:
clk: Fix memory leak in devm_clk_notifier_register()
devm_clk_notifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't get unregistered on device detach and the allocated resource was leaked.
Fix the issue by registering the resource through devres_add().
This issue was found with kmemleak on a Chromebook.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.122-77.145Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.41-63.109Upgrade kernel | Oct 24, 2025 | Oct 7, 2025 |
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 14, 2025 | Oct 7, 2025 |
| Ubuntu | — | Upgrade linux-oracleUpgrade linux-azure-fdeUpgrade linux-hwe-5.15Upgrade linux-realtimeUpgrade linux-bluefieldUpgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-kvmUpgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azureUpgrade linux-intel-iotg-5.15Upgrade linux-nvidiaUpgrade linux-raspiUpgrade linux-nvidia-tegra-igxUpgrade linux-gkeUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-riscv-5.15Upgrade linux-awsUpgrade linux-gkeopUpgrade linuxUpgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra | Oct 10, 2025 | Oct 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub