CVE-2026-31745

The record

In the Linux kernel, the following vulnerability has been resolved: reset: gpio: fix double free in reset_add_gpio_aux_device() error path When __auxiliary_device_add() fails, reset_add_gpio_aux_device() calls auxiliary_device_uninit(adev). The device release callback reset_gpio_aux_device_release() frees adev, but the current error path then calls kfree(adev) again, causing a double free. Keep kfree(adev) for the auxiliary_device_init() failure path, but avoid freeing adev after auxiliary_device_uninit().

Affected packages

Related vulnerabilities

• CVE-2026-119338 Tesseract is an open source OCR engine. CWE-415
• CVE-2026-119116 A use-after-free and double-free issue in the SetClient command handler of the… CWE-415
• CVE-2026-85890 Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute… CWE-415
• CVE-2026-83831 Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute… CWE-415
• CVE-2026-88812 A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before… CWE-415
• CVE-2026-116743 libyal libmsiecf through 20260525 contains a double free vulnerability in… CWE-415
• CVE-2026-112457 A double free issue was addressed with improved memory management. CWE-415
• CVE-2026-78116 The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission… CWE-415