Not yet scoredPublished Sep 11, 2026

CVE-2026-80974mfd: sm501: Fix potential memory leaks during remove

Updated under an hour ago (Oct 26, 2026, 11:50 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions sm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to kfree().

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from b6d6454fdb66f3829af8b92ab06825b6060fdf7e before b78e34ed7e97763d493d95a5c1edefffbfd2f356; from b6d6454fdb66f3829af8b92ab06825b6060fdf7e before fcc6c3b11d73459e0d55b27c98cc56d59fef4d82; from b6d6454fdb66f3829af8b92ab06825b6060fdf7e before 94ca4f040ba489db2d4b66e9d1ee91b4f9a00534; from b6d6454fdb66f3829af8b92ab06825b6060fdf7e before c8be3a076a59ec793fb2e4bdb830a709aaea9cce; from b6d6454fdb66f3829af8b92ab06825b6060fdf7e before 83feedd9d83c0c5199f98c72df0a6196b4aefb4d	CNA record

References

References

https://git.kernel.org/stable/c/b78e34ed7e97763d493d95a5c1edefffbfd2f356
https://git.kernel.org/stable/c/fcc6c3b11d73459e0d55b27c98cc56d59fef4d82
https://git.kernel.org/stable/c/94ca4f040ba489db2d4b66e9d1ee91b4f9a00534
https://git.kernel.org/stable/c/c8be3a076a59ec793fb2e4bdb830a709aaea9cce
https://git.kernel.org/stable/c/83feedd9d83c0c5199f98c72df0a6196b4aefb4d

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.