CVE-2026-68475

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

reset: sunxi: fix memory region leak on ioremap failure

In sunxi_reset_init(), when ioremap() fails, the memory region obtained via request_mem_region() is not released, leading to a resource leak.

Add an err_mem_region label to properly release the memory region before freeing the data structure.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 8f1ae77f466660b6da2455cccecc07ae631fa66d, < 23af4ea217800a20c405d72e82b11e24e27721f3; >= 8f1ae77f466660b6da2455cccecc07ae631fa66d, < ec836995c00a1968e403ef6beb53a73a9b0f318c; >= 8f1ae77f466660b6da2455cccecc07ae631fa66d, < b4d7333849839ff42e1bc802d5b5f63d71c65add; >= 8f1ae77f466660b6da2455cccecc07ae631fa66d, < 6dc0c8cd9c8a84808c6df760024d2604bc6d31fe; >= 8f1ae77f466660b6da2455cccecc07ae631fa66d, < 01e43f4e7d12dae6fa82ae1b2e91c9ce07e06cd8; >= 8f1ae77f466660b6da2455cccecc07ae631fa66d, < 82753ac86cb3d641b8634a61335fd0f04a61cc1a; >= 8f1ae77f466660b6da2455cccecc07ae631fa66d, < d826d3e04c5bd9d284ba29f330246a317a8a7023; >= 8f1ae77f466660b6da2455cccecc07ae631fa66d, < 1a8c89f8c112c75e84ff9a140f969e372aed0c9a
LinuxLinux3.14

References

Timeline

Published
Aug 15, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-684769.8In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation __ip_vs_get_out_rt() caCVE-2026-684779.8In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport offsets Sashiko reportCVE-2026-68478In the Linux kernel, the following vulnerability has been resolved: memstick: ms_block: reject a card that reports too many blocks msb_ftlCVE-2026-684797.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds rtlbt_parse_firmware(CVE-2026-68488.1A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or CVE-2026-68480In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attackerCVE-2026-684817.5In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports CVE-2026-684825.3Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorizeCVE-2026-684849.0Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verifyCVE-2026-684854.3An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency tCVE-2026-684865.4An authorization bypass in campaign-zone linking in Revive Adserver 6.0.8 and earlier allows an authenticated manager, or a trafficker with CVE-2026-684879.9Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.
CVE-2026-68475: Unscored | Vulnix