https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:25:07 +0000 https://vulnerability.circl.lu/vuln/cve-2026-53261 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>devlink: Release nested relation on devlink free</p> <p>devlink relation state is normally released from devl_unregister(), which calls devlink_rel_put(). This misses devlink instances that get a nested relation before registration and then fail probe before devl_register() is reached.</p> <p>That flow can happen for SFs. The child devlink gets linked to its parent before registration, then a later probe error calls devlink_free() directly. Since the instance was never registered, devl_unregister() is not called and devlink-&gt;rel is leaked.</p> <p>Release any pending relation from devlink_free() as well. The registered path is unchanged because devl_unregister() already clears devlink-&gt;rel before devlink_free() runs.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>devlink: Release nested relation on devlink free</p> <p>devlink relation state is normally released from devl_unregister(), which calls devlink_rel_put(). This misses devlink instances that get a nested relation before registration and then fail probe before devl_register() is reached.</p> <p>That flow can happen for SFs. The child devlink gets linked to its parent before registration, then a later probe error calls devlink_free() directly. Since the instance was never registered, devl_unregister() is not called and devlink-&gt;rel is leaked.</p> <p>Release any pending relation from devlink_free() as well. The registered path is unchanged because devl_unregister() already clears devlink-&gt;rel before devlink_free() runs.</p> https://vulnerability.circl.lu/vuln/cve-2026-53261