Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-46288
PUBLISHED
More InfoOfficial Page
Assigner-Linux
Assigner Org ID-416baaa9-dc9f-4396-8d5f-8c081fb06d67
View Known Exploited Vulnerability (KEV) details
Published At-08 Jun, 2026 | 15:41
Updated At-08 Jun, 2026 | 15:41
Rejected At-
▼CVE Numbering Authority (CNA)
of: unittest: fix use-after-free in of_unittest_changeset()

In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of_unittest_changeset() The variable 'parent' is assigned the value of 'nchangeset' earlier in the function, meaning both point to the same struct device_node. The call to of_node_put(nchangeset) can decrement the reference count to zero and free the node if there are no other holders. After that, the code still uses 'parent' to check for the presence of a property and to read a string property, leading to a use-after-free. Fix this by moving the of_node_put() call after the last access to 'parent', avoiding the UAF.

Affected Products
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/of/unittest.c
Default Status
unaffected
Versions
Affected
  • From 1c668ea65506e67ce2eae07b69bb09fcdd86e309 before 37318d1a27c9cc5a70d3cd7e49e30ec86f2b8ca1 (git)
  • From 1c668ea65506e67ce2eae07b69bb09fcdd86e309 before 7f0f0926f3010b10cff5e93446258f971e42f2fd (git)
  • From 1c668ea65506e67ce2eae07b69bb09fcdd86e309 before 6fdad20b7975bdc32e85b45f8f7c640f6687b81f (git)
  • From 1c668ea65506e67ce2eae07b69bb09fcdd86e309 before faecdd423c27f0d6090156a435ba9dbbac0eaddb (git)
Vendor
Linux Kernel Organization, IncLinux
Product
Linux
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Program Files
  • drivers/of/unittest.c
Default Status
affected
Versions
Affected
  • 6.12
Unaffected
  • From 0 before 6.12 (semver)
  • From 6.12.86 through 6.12.* (semver)
  • From 6.18.27 through 6.18.* (semver)
  • From 7.0.4 through 7.0.* (semver)
  • From 7.1-rc1 through * (original_commit_for_fix)
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://git.kernel.org/stable/c/37318d1a27c9cc5a70d3cd7e49e30ec86f2b8ca1
N/A
https://git.kernel.org/stable/c/7f0f0926f3010b10cff5e93446258f971e42f2fd
N/A
https://git.kernel.org/stable/c/6fdad20b7975bdc32e85b45f8f7c640f6687b81f
N/A
https://git.kernel.org/stable/c/faecdd423c27f0d6090156a435ba9dbbac0eaddb
N/A
Hyperlink: https://git.kernel.org/stable/c/37318d1a27c9cc5a70d3cd7e49e30ec86f2b8ca1
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/7f0f0926f3010b10cff5e93446258f971e42f2fd
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/6fdad20b7975bdc32e85b45f8f7c640f6687b81f
Resource: N/A
Hyperlink: https://git.kernel.org/stable/c/faecdd423c27f0d6090156a435ba9dbbac0eaddb
Resource: N/A
Details not found