Vulnerability in Linux

CVE-2026-63907

In the Linux kernel, the following vulnerability has been resolved: uio: uio_pci_generic_sva: fix double free of devm_kzalloc() memory uio_pci_sva allocates struct uio_pci_sva_dev with devm_kzalloc() in probe(), but then calls kfree(udev…

EPSS: 0.002 (8.8th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 3397c3cd859a2c51962ad032dcf97961d42f9db2, 6.19, 0

References