Threats Tagged 'cve-2026-46285'

CVE-2025-71315 is a vulnerability affecting the Linux kernel, which is the core component of the Linux operating system. The vulnerability involves multiple issues that can lead to denial of service conditions. It impacts various Linux distributions including Amazon Linux 2 and Debian. No CVSS score is provided for this vulnerability.

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_release() In docg3_release(), the docg3 pointer is obtained from cascade->floors[0]->priv before the loop that calls doc_release_device() on each floor. doc_release_device() frees the docg3 struct via kfree(docg3) at line 1881. After the loop, docg3->cascade->bch dereferences the already-freed pointer. Fix this by accessing cascade->bch directly, which is equivalent since docg3->cascade points back to the same cascade struct, and is already available as a local variable. This also removes the now-unused docg3 local variable.

CVE-2026-46285 is a use-after-free vulnerability in the docg3_release() function related to the mtd: docg3 component in Microsoft Azure Linux kernel 3.0 (azl3 kernel 0:6.6.139.1-1.azl3). The vulnerability could lead to memory corruption issues. No CVSS score or detailed impact information is provided. There is no indication of known exploits in the wild or available patches at this time.