CVE-2026-93215EPSS p5.5%
CVE-2026-93215CVE-2026-93215
Description
In the Linux kernel, the following vulnerability has been resolved:
cdx: Fix double free when sysfs file creation fails
In cdx_create_res_attr(), if sysfs_create_bin_file() fails, the code
frees res_attr but doesn't set cdx_dev->res_attr[num] to NULL. This
leaves a dangling pointer in the array. Then cdx_destroy_res_attr()
frees the already-freed memory. Fix the double free by initializing
cdx_dev->res_attr[num] after sysfs_create_bin_file() completes.
Scoring
| EPSS | 0.17% probability of exploitation · percentile 5.5% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-24 |