CVE-2026-89992 in Linux
摘要
由 MITRE • 2026-09-16
In the Linux kernel, the following vulnerability has been resolved:
cpuidle: dt_idle_genpd: kfree() the original name allocation
dt_idle_pd_alloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dt_idle_pd_free() kfree()s pd->name, which is no longer the start of the allocation.
Copy the basename instead.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.