CVE-2026-63907

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the uio pci generic sva component. The uio pci sva structure is allocated using devm kzalloc() within the probe() function. However, the code explicitly calls kfree() on the udev variable during both the probe() error path and the remove() function. Since devm kzalloc() uses devres-managed memory, which is automatically freed when a device is detached or a probe fails, the manual call to kfree() results in the memory being freed twice.

Recommendations Remove the manual kfree() calls and the associated unused label within the uio pci generic sva component.