In the Linux kernel, the following vulnerability has been resolved:
clk: Fix memory leak in devm_clk_notifier_register()
devm_clk_notifier_register() allocates a devres resource for clk notifier but didn't register that to the device, so the notifier didn't get unregistered on device detach and the allocated resource was leaked.
Fix the issue by registering the resource through devres_add().
This issue was found with kmemleak on a Chromebook.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.122-77.145Upgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade bpftoolUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-6.1.41-63.109 | Oct 24, 2025 | Oct 7, 2025 |
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 14, 2025 | Oct 7, 2025 |
| Ubuntu | — | Upgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-azure-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-awsUpgrade linux-gkeopUpgrade linux-gkeUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iot-realtimeUpgrade linux-oracle-5.15Upgrade linux-riscv-5.15Upgrade linuxUpgrade linux-nvidia-tegraUpgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-gcp-5.15Upgrade linux-aws-5.15Upgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-azureUpgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-kvmUpgrade linux-raspiUpgrade linux-intel-iotgUpgrade linux-ibmUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15 | Oct 10, 2025 | Oct 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub