CVE-2026-43196

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-43196
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43196.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-43196
Downstream
Related
Published
2026-05-06T11:28:04Z
Modified
2026-08-27T18:27:04Z
Summary
soc: ti: pruss: Fix double free in pruss_clk_mux_setup()
Details

In the Linux kernel, the following vulnerability has been resolved:

soc: ti: pruss: Fix double free in pruss_clk_mux_setup()

In the pruss_clk_mux_setup(), the devm_add_action_or_reset() indirectly calls pruss_of_free_clk_provider(), which calls of_node_put(clk_mux_np) on the error path. However, after the devm_add_action_or_reset() returns, the of_node_put(clk_mux_np) is called again, causing a double free.

Fix by returning directly, to avoid the duplicate of_node_put().

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43196.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ba59c9b43c86b2c2396acac94e41d946cbaec9fe
Fixed
dbda01bf2dfe5af33163e1e5fca1b82b619c2803
Fixed
24c40076e3bc3d73c839c886d6bda1da6c4d9b93
Fixed
818cf66d91c8ef09b01664a12d5f4ea786d64396
Fixed
e113339cc7d23be4948891f3a702e9dce5b47035
Fixed
69aa67c1e22d13e9aad4b08c86304ad8e743dcab
Fixed
b7db9953c2f8da37de498198623b05b46f8e2ca0
Fixed
04dbbb18cc9c8795c9ff47d8994bc03ebfef9d68
Fixed
80db65d4acfb9ff12d00172aed39ea8b98261aad

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43196.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.10.0
Fixed
5.10.252
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.202
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.165
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.128
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.75
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.16
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.6

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43196.json"