Linux Kernel MAX9286 Driver Control Handler Memory Leak Vulnerability

Vulnerability

A memory leak vulnerability has been identified in the Linux kernel's MAX9286 driver. During certain error handling processes and when the driver is removed, the control handler is not properly released, leading to a memory leak. This issue has been addressed in the Linux kernel stable tree.

Impact

The vulnerability causes a memory leak, which can lead to increased memory usage and potential exhaustion of system resources over time.

Reproduction

The vulnerability can be reproduced by loading the MAX9286 driver and then triggering a probe-time error or removing the driver. In both cases, the control handler is not properly freed, causing a memory leak.

Remediation

Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel official website.

Added: Dec 24, 2025, 3:56 PM
Updated: Dec 24, 2025, 3:56 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
5.7
remediation
7.7
relevance
1.7
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.