In the Linux kernel, the following vulnerability has been resolved:
soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()
In mpfs_sys_controller_probe(), if of_get_mtd_device_by_node() fails,
the function returns immediately without freeing the allocated memory
for sys_controller, leading to a memory leak.
Fix this by jumping to the out_free label to ensure the memory is
properly freed.
Also, consolidate the error handling for the mbox_request_channel()
failure case to use the same label.
References
Configurations
Configuration 1 (hide)
|
History
20 May 2026, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Linux |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| References | () https://git.kernel.org/stable/c/17c84fb7cf3971cc621646185d785670e9530ca1 - Patch | |
| References | () https://git.kernel.org/stable/c/5a741f8cc6fe62542f955cd8d24933a1b6589cbd - Patch | |
| References | () https://git.kernel.org/stable/c/da4b44c42f40501db35f5d0a6243708a061490a0 - Patch | |
| References | () https://git.kernel.org/stable/c/e3dd5cffba07de6574165a72851471cd42cc6d15 - Patch | |
| CWE | CWE-401 | |
| CPE | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
03 Apr 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-03 16:16
Updated : 2026-05-20 15:18
NVD link : CVE-2026-23464
Mitre link : CVE-2026-23464
CVE.ORG link : CVE-2026-23464
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-401
Missing Release of Memory after Effective Lifetime