In the Linux kernel, the following vulnerability has been resolved:
of: unittest: fix use-after-free in of_unittest_changeset()
The variable 'parent' is assigned the value of 'nchangeset' earlier in the function, meaning both point to the same struct device_node. The call to of_node_put(nchangeset) can decrement the reference count to zero and free the node if there are no other holders. After that, the code still uses 'parent' to check for the presence of a property and to read a string property, leading to a use-after-free.
Fix this by moving the of_node_put() call after the last access to 'parent', avoiding the UAF.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-aws-64k-7.0Upgrade linux-image-nvidiaUpgrade linux-image-raspi-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-virtual-7.0Upgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-aws-7.0Upgrade linux-image-oracleUpgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-7.0Upgrade linux-image-ibmUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-nvidia-7.0Upgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-virtualUpgrade linux-image-7.0.0-1008-awsUpgrade linux-image-oracle-7.0Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-7.0Upgrade linux-image-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-7.0.0-1008-oemUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04dUpgrade linux-image-genericUpgrade linux-image-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-oem-26.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-7.0Upgrade linux-image-oem-26.04a | Jul 1, 2026 | Jun 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub