In the Linux kernel, the following vulnerability has been resolved:
ice: fix double free in icesfeth_activate() error path
When auxiliarydeviceadd() fails, icesfethactivate() jumps to auxdevuninit and calls auxiliarydeviceuninit(&sfdev->adev).
The device release callback icesfdevrelease() frees sfdev, but the current error path falls through to sfdevfree and calls kfree(sf_dev) again, causing a double free.
Keep kfree(sfdev) for the auxiliarydeviceinit() failure path, but avoid falling through to sfdevfree after auxiliarydevice_uninit().
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46162.json"
}