VDB

CVE-2026-23464

CVE-2026-23464 PUBLISHED

In the Linux kernel, the following vulnerability has been resolved: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() In mpfs_sys_controller_probe(), if of_get_mtd_device_by_node() fails, the function returns immediately without freeing the allocated memory for sys_controller, leading to a memory leak. Fix this by jumping to the out_free label to ensure the memory is properly freed. Also, consolidate the error handling for the mbox_request_channel() failure case to use the same label.

EPSS 0.02% · 3.2th percentile

Risk Scores

EPSS Score
0.02%
3.2th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel6.8, 6.8, 6.8
LinuxLinux742aa6c563d29c367edbf0ef7236a7a853ed9be4, 742aa6c563d29c367edbf0ef7236a7a853ed9be4, 742aa6c563d29c367edbf0ef7236a7a853ed9be4

Timeline

  • Apr 3, 2026 CVE Published
  • Apr 7, 2026 CVE Updated
  • May 18, 2026 EPSS Score
  • May 19, 2026 EPSS Score
  • May 20, 2026 EPSS Score
  • May 21, 2026 EPSS Score
  • May 22, 2026 EPSS Score
  • May 23, 2026 EPSS Score
  • May 24, 2026 EPSS Score
  • May 25, 2026 EPSS Score
  • May 26, 2026 EPSS Score
  • May 27, 2026 EPSS Score

References

…and 49 more

Open in Interactive Console →
$ Console Community · 100/wk Open console ›