CVE-2026-23044 — Detection of Error Condition Without Action in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 92.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 4
Description
In the Linux kernel, the following vulnerability has been resolved:
PM: hibernate: Fix crash when freeing invalid crypto compressor
When crypto_alloc_acomp() fails, it returns an ERR_PTR value, not NULL.
The cleanup code in save_compressed_image() and load_compressed_image()
unconditionally calls crypto_free_acomp() without checking for ERR_PTR,
which causes crypto_acomp_tfm() to dereference an invalid pointer and
crash the kernel.
This can be triggered when the compression algorithm is unav…
Affected Packages4 packages
▶CVEListV5linux/linuxb03d542c3c9569f549b1ba0cf7f4d90151fbf8ab — b7a883b0135dbc6817e90a829421c9fc8cd94bad+2
🔴Vulnerability Details
3GHSA▶
GHSA-fmhv-7w67-r8mw: In the Linux kernel, the following vulnerability has been resolved:
PM: hibernate: Fix crash when freeing invalid crypto compressor
When crypto_allo↗2026-02-04
OSV▶
CVE-2026-23044: In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Fix crash when freeing invalid crypto compressor When crypto_alloc_↗2026-02-04