What’s Vulnerable › Vulnerabilities

CVE-2026-80974: mfd: sm501: Fix potential memory leaks during remove

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-11 · updated 2026-10-21

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions sm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to kfree().

Affected products

• Linux kernel: 2.6.21 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/83feedd9d83c0c5199f98c72df0a6196b4aefb4d
• https://git.kernel.org/stable/c/94ca4f040ba489db2d4b66e9d1ee91b4f9a00534
• https://git.kernel.org/stable/c/b78e34ed7e97763d493d95a5c1edefffbfd2f356
• https://git.kernel.org/stable/c/c8be3a076a59ec793fb2e4bdb830a709aaea9cce
• https://git.kernel.org/stable/c/fcc6c3b11d73459e0d55b27c98cc56d59fef4d82

Get alerted when CVE-2026-80974 or the next vulnerability affects your stack