CVE-2026-93069EPSS p8.6%
CVE-2026-93069CVE-2026-93069
Description
In the Linux kernel, the following vulnerability has been resolved:
OPP: Fix cleanup ordering
Commit 173e02d67494 ("OPP: Initialize scope-based pointers inline")
added initialization for all pointers. In some cases, the ordering was
changed so that *opp_table was initialized after *opp. This also changes
the order of the registered cleanup functions.
When the cleanup happens, this can cause use-after-free errors when the
last reference is released and the release function _opp_kref_release
tries to access the already freed opp->opp_table.
Initialize *opp_table before *opp again to fix this and ensure the
correct cleanup order.
Scoring
| EPSS | 0.20% probability of exploitation · percentile 8.6% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-17 |