In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_one() calls gem_remove_one() when register_netdev() fails. gem_remove_one() unregisters and frees resources owned by the net_device, including the DMA block, MMIO mapping, PCI regions, and the net_device itself. gem_init_one() then falls through to its own cleanup labels and frees the same resources again. Keep the register_netdev() error path in gem_init_one(): clear drvdata so PM/remove paths do not see a half-registered device, remove the NAPI instance added during probe, and let the existing cleanup labels release the resources once. The issue was found by a local static-analysis checker for probe error paths. The reported path was manually inspected before sending this fix. Compile-tested with CONFIG_SUNGEM=y. Runtime testing was not performed because no sungem hardware is available.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/331c99029a1cee1111f82f63d15b3cdebefbd341 cve-icon cve-icon
https://git.kernel.org/stable/c/36dea2f639249460d13f6ca66b2a9064187cd34d cve-icon cve-icon
https://git.kernel.org/stable/c/a63eaf7605d1579cf3f551792e478cfaf5ac37d1 cve-icon cve-icon
https://git.kernel.org/stable/c/b15a3cc68e2450aa0edd94a74a7bdd45fcc17dd9 cve-icon cve-icon
https://git.kernel.org/stable/c/bc49e8746584564dba47d963d1916cc876fc6f6b cve-icon cve-icon
https://git.kernel.org/stable/c/f1d04fefb0c2a2de32d9cee22cdc2088be3758d1 cve-icon cve-icon
https://git.kernel.org/stable/c/f3bd60b26814b7c3c57c629abb0857dfc76d214a cve-icon cve-icon
https://git.kernel.org/stable/c/fb73cdc50b6755e5c3a80a195b2708a39ada0230 cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_one() calls gem_remove_one() when register_netdev() fails. gem_remove_one() unregisters and frees resources owned by the net_device, including the DMA block, MMIO mapping, PCI regions, and the net_device itself. gem_init_one() then falls through to its own cleanup labels and frees the same resources again. Keep the register_netdev() error path in gem_init_one(): clear drvdata so PM/remove paths do not see a half-registered device, remove the NAPI instance added during probe, and let the existing cleanup labels release the resources once. The issue was found by a local static-analysis checker for probe error paths. The reported path was manually inspected before sending this fix. Compile-tested with CONFIG_SUNGEM=y. Runtime testing was not performed because no sungem hardware is available.
Title net: sungem: fix probe error cleanup
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:56:30.225Z

Reserved: 2026-08-09T03:40:39.926Z

Link: CVE-2026-72406

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:14.177

Modified: 2026-08-15T06:22:14.177

Link: CVE-2026-72406

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.