CVE-2026-72058

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ixp4xx hss probe() function where two HDLC netdevs are allocated instead of one. The first allocation is stored in ndev, initialized, and registered via register hdlc device(), while the second is stored in port->netdev and used during the removal process for unregister hdlc device() and free netdev(). This mismatch results in the registered object not being the one unregistered and freed. Additionally, a memory leak occurs if the second alloc hdlcdev() call fails, and the first allocation is not verified before ndev is utilized.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.