CVE-2026-45981

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the css alloc subchannel() function where device initialize() is called before the DMA masks are configured. If the dma set coherent mask() or dma set mask() functions fail, the error path incorrectly frees the subchannel structure using kfree() directly. This bypasses the device model reference counting, which requires that any embedded struct device initialized via device initialize() be released using put device(). This improper lifecycle handling can lead to use-after-free or double-free conditions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.