CVE-2026-46288

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the of unittest changeset() function. The variable parent and nchangeset both point to the same struct device node. When of node put(nchangeset) is called, it may decrement the reference count to zero and free the node. Subsequent attempts to use parent to check for properties or read a string property result in accessing memory that has already been released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.