CVE-2026-23096

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

uacce: fix cdev handling in the cleanup path

When cdev_device_add fails, it internally releases the cdev memory, and if cdev_device_del is then executed, it will cause a hang error. To fix it, we check the return value of cdev_device_add() and clear uacce->cdev to avoid calling cdev_device_del in the uacce_remove.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 015d239ac0142ad0e26567fd890ef8d171f13709, < c94c7188d325bc5137d447d67a2f18f7d4f2f4a3; >= 015d239ac0142ad0e26567fd890ef8d171f13709, < 1bc3e51367c420e6db31f41efa874c7a8e12194a; >= 015d239ac0142ad0e26567fd890ef8d171f13709, < 819d647406200d0e83e56fd2df8f451b11290559; >= 015d239ac0142ad0e26567fd890ef8d171f13709, < d9031575a2f8aabc53af3025dd79af313a2e046b; >= 015d239ac0142ad0e26567fd890ef8d171f13709, < 98d67a1bd6caddd0a8b8c82a0b925742cf500936; >= 015d239ac0142ad0e26567fd890ef8d171f13709, < bd2393ed7712513e7e2dbcb6e21464a67ff9e702; >= 015d239ac0142ad0e26567fd890ef8d171f13709, < a3bece3678f6c88db1f44c602b2a63e84b4040ac
LinuxLinux5.7

References

Timeline

Published
Feb 4, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-230975.5In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has founCVE-2026-230987.8In the Linux kernel, the following vulnerability has been resolved: netrom: fix double-free in nr_route_frame() In nr_route_frame(), old_sCVE-2026-230997.1In the Linux kernel, the following vulnerability has been resolved: bonding: limit BOND_MODE_8023AD to Ethernet devices BOND_MODE_8023AD mCVE-2026-23107.8IBM webMethods Integration Server 11.1 IBM webMethods Integration is vulnerable to an XML external entity injection (XXE) attack when procesCVE-2026-231005.5In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_shared() Patch series "mm/hugetlb: fixes fCVE-2026-231014.7In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to leds_list when it is fully ready BefoCVE-2026-231027.1In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Fix restoration of SVE context When SME is suppoCVE-2026-231035.5In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the addrs_lock be per porCVE-2026-231045.5In the Linux kernel, the following vulnerability has been resolved: ice: fix devlink reload call trace Commit 4da71a77fc3b ("ice: read intCVE-2026-231055.5In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use cl_is_active to determine whether class is active iCVE-2026-231065.5In the Linux kernel, the following vulnerability has been resolved: timekeeping: Adjust the leap state for the correct auxiliary timekeeperCVE-2026-231075.5In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA The code