3 vulnerabilities classified as CWE-666 (在生命周期错误阶段对资源进行操作). AI Chinese analysis included.
char* ptr = (char*)malloc (SIZE); ... if (abrt) { free(ptr); } ... free(ptr);
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-16148 | Kernel panic in the it82xx2 USB device controller driver via re-initialization of a busy delayable work item — zephyr | 4.6 | Medium | 2026-09-14 |
| CVE-2026-15460 | Missing channel-state validation in Zephyr Bluetooth Classic L2CAP receive path — zephyr | 5.4 | Medium | 2026-09-09 |
| CVE-2026-68930 | Russh: Channel-scoped server callbacks can be reached without an open channel — russh | 6.5 | Medium | 2026-08-03 |
Vulnerabilities classified as CWE-666 (在生命周期错误阶段对资源进行操作) represent 3 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.