CVE-2026-80974

high

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions sm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to kfree().

References

https://git.kernel.org/stable/c/fcc6c3b11d73459e0d55b27c98cc56d59fef4d82

https://git.kernel.org/stable/c/c8be3a076a59ec793fb2e4bdb830a709aaea9cce

https://git.kernel.org/stable/c/94ca4f040ba489db2d4b66e9d1ee91b4f9a00534

https://git.kernel.org/stable/c/83feedd9d83c0c5199f98c72df0a6196b4aefb4d

Details

Source: Mitre, NVD

Published: 2026-09-11

Updated: 2026-09-11

Risk Information

CVSS v2

Base Score: 5.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 7.1

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Severity: High

EPSS

EPSS: 0.002