{"id":"CVE-2026-43328","summary":"cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path\n\nWhen kobject_init_and_add() fails, cpufreq_dbs_governor_init() calls\nkobject_put(&dbs_data-\u003eattr_set.kobj).\n\nThe kobject release callback cpufreq_dbs_data_release() calls\ngov-\u003eexit(dbs_data) and kfree(dbs_data), but the current error path\nthen calls gov-\u003eexit(dbs_data) and kfree(dbs_data) again, causing a\ndouble free.\n\nKeep the direct kfree(dbs_data) for the gov-\u003einit() failure path, but\nafter kobject_init_and_add() has been called, let kobject_put() handle\nthe cleanup through cpufreq_dbs_data_release().","modified":"2026-10-28T02:31:09.319600912Z","published":"2026-05-08T13:31:16.787Z","related":["SUSE-SU-2026:22043-1","SUSE-SU-2026:22048-1","SUSE-SU-2026:22076-1","SUSE-SU-2026:22087-1","SUSE-SU-2026:23193-1","SUSE-SU-2026:23194-1","SUSE-SU-2026:23241-1","SUSE-SU-2026:23244-1","SUSE-SU-2026:3790-1","SUSE-SU-2026:3810-1","openSUSE-SU-2026:20912-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43328.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/019ea28629720c220daedf38107c8787f330dc05"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3bf9d023d2329a0e5379f2fd09d06ef09729cd9d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/427d048e4f6acbfa01b5a8062449fe0ee8987c0d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4b9118e93d2499bb2808ef3742fa0ce06f4f8117"},{"type":"WEB","url":"https://git.kernel.org/stable/c/56bc91ee78babe9578585a2bc137abc4b3115ff3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6dcf9d0064ce2f3e3dfe5755f98b93abe6a98e1e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d2703b4f8fb7cc6f0dfdb2dc2359cc46189e7357"},{"type":"WEB","url":"https://git.kernel.org/stable/c/da39ee627fd82b52068d4d5f115749a8b7d271f9"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43328.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43328"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4ebe36c94aed95de71a8ce6a6762226d31c938ee"},{"fixed":"56bc91ee78babe9578585a2bc137abc4b3115ff3"},{"fixed":"4b9118e93d2499bb2808ef3742fa0ce06f4f8117"},{"fixed":"019ea28629720c220daedf38107c8787f330dc05"},{"fixed":"da39ee627fd82b52068d4d5f115749a8b7d271f9"},{"fixed":"427d048e4f6acbfa01b5a8062449fe0ee8987c0d"},{"fixed":"d2703b4f8fb7cc6f0dfdb2dc2359cc46189e7357"},{"fixed":"3bf9d023d2329a0e5379f2fd09d06ef09729cd9d"},{"fixed":"6dcf9d0064ce2f3e3dfe5755f98b93abe6a98e1e"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.1.6"},{"fixed":"5.2"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"e977b1477a6725868302957e6b5c330220391797"}]}],"versions":["v5.1.21","v5.1.20","v5.1.19","v5.1.18","v5.1.17","v5.1.16","v5.1.15","v5.1.14","v5.1.13","v5.1.12","v5.1.11","v5.1.10","v5.1.9","v5.1.8","v5.1.7","v5.1.6"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43328.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.0"},{"fixed":"5.10.253"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.209"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.168"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.134"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.81"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.22"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"6.19.12"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43328.json"}}],"schema_version":"1.9.2"}