---
id: CVE-2026-46288
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  of: unittest: fix use-after-free in of_unittest_changeset()

  The variable 'parent' is assigned the value of 'nchangeset' earlier in the
  function, meaning both point to …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  of: unittest: fix use-after-free in of_unittest_changeset()

  The variable 'parent' is assigned the value of 'nchangeset' earlier in the
  function, meaning both point to …
severity: high
cvss: 8.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
published: '2026-06-08'
updated: '2026-07-07'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-46288'
references:
  - url: 'https://git.kernel.org/stable/c/37318d1a27c9cc5a70d3cd7e49e30ec86f2b8ca1'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/6fdad20b7975bdc32e85b45f8f7c640f6687b81f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7f0f0926f3010b10cff5e93446258f971e42f2fd'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/faecdd423c27f0d6090156a435ba9dbbac0eaddb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.0014
epssPercentile: 0.03689
ingestedAt: '2026-07-07T18:42:24.290Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

of: unittest: fix use-after-free in of_unittest_changeset()

The variable 'parent' is assigned the value of 'nchangeset' earlier in the
function, meaning both point to the same struct device_node. The call to
of_node_put(nchangeset) can decrement the reference count to zero and
free the node if there are no other holders. After that, the code still
uses 'parent' to check for the presence of a property and to read a
string property, leading to a use-after-free.

Fix this by moving the of_node_put() call after the last access to
'parent', avoiding the UAF.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.