In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: fix double free of WoL irq We do not need to free wol_irq since it was instantiated with devm_request_irq(). So devres will free for us.
Fix
Patch, vendor advisory and mitigation references on NVD 4
- https://git.kernel.org/stable/c/121a6ad9cd42ba3bfc57deae93e3326515c2afe1 Patch
- https://git.kernel.org/stable/c/8a30509ce6a29bdf18e0802383c524a7b2357ec0 Patch
- https://git.kernel.org/stable/c/9e5f5c07cc7d66522f8c9676c28605eba5d4a20e Patch
- https://git.kernel.org/stable/c/cbfa5be2bf64511d49b854a0f9fd6d0b5118621f Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 5
- CwesCWE-415NVD modified 2026-10-21 13:18
- Cpes+9 CPE criteria (now 9)NVD modified 2026-10-21 13:18
- StatusPublished → ModifiedNVD modified 2026-10-21 13:18
- CVSS7.8 (v3.1, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)NVD modified 2026-10-21 13:18
- First seenunscored · linuxNVD modified 2026-10-21 12:39
Affected (CPE criteria) 9
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:6.6:-:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
References 5
- https://git.kernel.org/stable/c/121a6ad9cd42ba3bfc57deae93e3326515c2afe1 Patch
- https://git.kernel.org/stable/c/8a30509ce6a29bdf18e0802383c524a7b2357ec0 Patch
- https://git.kernel.org/stable/c/9e5f5c07cc7d66522f8c9676c28605eba5d4a20e Patch
- https://git.kernel.org/stable/c/c5e2de193831ab9610a1ca542507f75d126f09b5
- https://git.kernel.org/stable/c/cbfa5be2bf64511d49b854a0f9fd6d0b5118621f Patch