CVE-2026-43196
MediumSummary
A vulnerability in the Linux kernel related to double free in the pruss_clk_mux_setup() function has been resolved. The issue occurred during the call to devm_add_action_or_reset(), which triggered pruss_of_free_clk_provider() on error.
Risk Assessment
Double free can lead to unpredictable system behavior, including crashes or potential remote code execution. Organizations should be aware of the risks associated with using vulnerable kernel versions.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability. Regular monitoring and updating of systems is crucial for maintaining security.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in pruss_clk_mux_setup() In the pruss_clk_mux_setup(), the devm_add_action_or_reset() indirectly calls pruss_of_free_clk_provider(), which calls of_node_put(clk_mux_np) on the error path. However, a