CVE-2026-23176 — Missing Release of Memory after Effective Lifetime in Linux
7 documents6 sources
Severity
—N/A
No vectorEPSS
0.1%
top 84.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 14
Description
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
toshiba_haps_add() leaks the haps object allocated by it if it returns
an error after allocating that object successfully.
toshiba_haps_remove() does not free the object pointed to by
toshiba_haps before clearing that pointer, so it becomes unreachable
allocated memory.
Address these memory leaks by using devm_kzalloc() for allocating
the memory in question.
Affected Packages5 packages
▶CVEListV5linux/linux23d0ba0c908ac10139f0351023c64198d7fc1409 — 17f37c4cdf42a9e4915216b9e130fc8baef4cc64+7
🔴Vulnerability Details
3GHSA▶
GHSA-vm5x-8w9j-f2rm: In the Linux kernel, the following vulnerability has been resolved:
platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
toshiba_haps↗2026-02-14
OSV▶
CVE-2026-23176: In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_haps: Fix memory leaks in add/remove routines toshiba_haps_a↗2026-02-14