# CVE-2026-45891: linux: In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix double free issue for tx spare bu... CVE-2026-45891 is fixed in 16 products on 1 platform, first by DEBIAN-CVE-2026-45891, released May 27, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-45891 - Priority: High - CVSS: 7.8 (high) - EPSS: 0.0013 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: May 27, 2026 ## Description In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix double free issue for tx spare buffer In hns3_set_ringparam(), a temporary copy (tmp_rings) of the ring structure is created for rollback. However, the tx_spare pointer in the original ring handle is incorrectly left pointing to the old backup memory. Later, if memory allocation fails in hns3_init_all_ring() during the setup, the error path attempts to free all newly allocated rings. Since tx_spare contains a stale (non-NULL) pointer from the backup, it is mistaken for a newly allocated buffer and is erroneously freed, leading to a double-free of the backup memory. The root cause is that the tx_spare field was not cleared after its value was saved in tmp_rings, leaving a dangling pointer. Fix this by setting tx_spare to NULL in the original ring structure when the creation of the new `tx_spare` fails. This ensures the error cleanup path only frees genuinely newly allocated buffers. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | dtb-aarch64 opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-64kb opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-64kb sles 15.7 | 6.4.0-150700.53.66.1 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-64kb sles 16.0 | 6.12.0-160000.36.1 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | kernel-azure opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-azure sles 15.7 | 6.4.0-150700.53.66.1 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-azure sles 16.0 | 6.12.0-160000.36.1 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | kernel-default opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-default sles 15.7 | 6.4.0-150700.53.66.1 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-default sles 16.0 | 6.12.0-160000.36.1 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | kernel-default-base opensuse-leap 16.0 | 6.12.0-160000.36.1.160000.2.17 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-default-base sles 15.7 | 6.4.0-150700.53.66.1.150700.17.39.1 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-default-base sles 16.0 | 6.12.0-160000.36.1.160000.2.17 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | kernel-docs opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-docs sles 15.7 | 6.4.0-150700.53.66.2 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-docs sles 16.0 | 6.12.0-160000.36.1 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | kernel-kvmsmall opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-kvmsmall sles 16.0 | 6.12.0-160000.36.1 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | kernel-livepatch-SLE15-SP7-RT_Update_17 sles 15.7 | 1-150700.1.3.1 | [SUSE-SU-2026:2799-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2799-1.md) | Jul 8, 2026 | | Linux | kernel-livepatch-SLE15-SP7_Update_18 sles 15.7 | 1-150700.15.3.1 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-obs-build opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-obs-build sles 15.7 | 6.4.0-150700.53.66.1 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-obs-qa opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-obs-qa sles 16.0 | 6.12.0-160000.36.1 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | kernel-rt opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-source opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-source sles 15.7 | 6.4.0-150700.53.66.1 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-source sles 16.0 | 6.12.0-160000.36.1 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | kernel-syms opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-syms sles 15.7 | 6.4.0-150700.53.66.1 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-syms sles 16.0 | 6.12.0-160000.36.1 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | kernel-zfcpdump opensuse-leap 16.0 | 6.12.0-160000.36.1 | [OPENSUSE-SU-2026:21388-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21388-1.md) | Jul 21, 2026 | | Linux | kernel-zfcpdump sles 15.7 | 6.4.0-150700.53.66.1 | [SUSE-SU-2026:2800-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2800-1.md) | Jul 8, 2026 | | Linux | kernel-zfcpdump sles 16.0 | 6.12.0-160000.36.1 | [SUSE-SU-2026:22835-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22835-1.md) | Jul 21, 2026 | | Linux | linux Debian 12.15 (bookworm) | 6.1.170-1 | [DEBIAN-CVE-2026-45891](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45891.md) | May 27, 2026 | | Linux | linux Debian 13.5 (trixie) | 6.12.85-1 | [DEBIAN-CVE-2026-45891](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45891.md) | May 27, 2026 | | Linux | linux Debian 14 | 6.18.14-1 | [DEBIAN-CVE-2026-45891](https://patchblox.com/security/data/fix/linux/debian-cve-2026-45891.md) | May 27, 2026 | --- Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.