Strix
73.1K

CVE-2026-80974

UnknownEPSS 0.21%

Last modified

CVE-2026-80974 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions sm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to kfree().. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions sm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to kfree().

Metrics

EPSS Probability
0.21%

10.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < 0eae998ca448029fb61a6bb9fd7b1f9d05a9490d; >= b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < b78e34ed7e97763d493d95a5c1edefffbfd2f356; >= b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < fcc6c3b11d73459e0d55b27c98cc56d59fef4d82; >= b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < 94ca4f040ba489db2d4b66e9d1ee91b4f9a00534; >= b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < c8be3a076a59ec793fb2e4bdb830a709aaea9cce; >= b6d6454fdb66f3829af8b92ab06825b6060fdf7e, < 83feedd9d83c0c5199f98c72df0a6196b4aefb4d
LinuxLinux2.6.21

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-80974?
In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix potential memory leaks during remove The memory allocated for struct sm501_devdata in sm501_pci_probe() and sm501_plat_probe() is not freed by the corresponding remove functions sm501_pci_remove() and sm501_plat_remove(). Fix that by adding a call to kfree().
How severe is CVE-2026-80974?
Severity scoring for CVE-2026-80974 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-80974?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-80974?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST