Linux Kernel: NULL Pointer Deref in bnge Aux Device Release
CVE-2026-74706 Published on August 22, 2026
bnge: Fix NULL pointer dereference in aux device release
In the Linux kernel, the following vulnerability has been resolved:
bnge: Fix NULL pointer dereference in aux device release
If allocation of auxr_dev fails during auxiliary device setup, the error
path calls auxiliary_device_uninit(), which eventually invokes
bnge_aux_dev_release().
The release callback unconditionally dereferences aux_priv->auxr_dev->pdev
to retrieve the parent bnge_dev. Since auxr_dev has not yet been allocated
on this failure path, the dereference results in a NULL pointer exception
Retrieve the parent bnge_dev from the auxiliary device's parent instead of
auxr_dev, and free auxr_dev only when it was successfully allocated. This
allows the release callback to correctly clean up partially initialized
auxiliary devices.
Products Associated with CVE-2026-74706
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 8ac050ec3b1c0dcb5e89cf86fe2ebe0afcc73554 and below 83ef2f3cab7fe6dd9155cd598dc64be524d963a9 is affected.
- Version 8ac050ec3b1c0dcb5e89cf86fe2ebe0afcc73554 and below 1cb4298810e27e037d3ca07286ecbb97e89ba58d is affected.
- Version 6.19 is affected.
- Before 6.19 is unaffected.
- Version 7.1.9, <= 7.1.* is unaffected.
- Version 7.2, <= * is unaffected.