CVE-2026-23087

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-02-04 Modified: 2026-11-10 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Memory allocated for struct vscsiblk_info in scsiback_probe() is not freed in scsiback_remove() leading to potential memory leaks on remove, as well as in the scsiback_probe() error paths. Fix that by freeing it in scsiback_remove().

Weakness Classification (1)

Affected Software (23)

VendorProductVersion
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 427b0fb30ddec3bad05dcd73b00718f98c7026d2
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 4a975c72429b050c234405668b742cdecc11548e
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < f86264ec0e2b102fcd49bf3e4f32fee669d482fc
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 32e52b56056daf0f0881fd9254706acf25b4be97
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 24c441f0e24da175d7912095663f526ac480dc4f
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 901a5f309daba412e2a30364d7ec1492fa11c32c
Linux Linux 3.18
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 427b0fb30ddec3bad05dcd73b00718f98c7026d2
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 4a975c72429b050c234405668b742cdecc11548e
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < f86264ec0e2b102fcd49bf3e4f32fee669d482fc
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 32e52b56056daf0f0881fd9254706acf25b4be97
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 24c441f0e24da175d7912095663f526ac480dc4f
Linux Linux d9d660f6e562a47b4065eeb7e538910b0471b988 < 901a5f309daba412e2a30364d7ec1492fa11c32c
Linux Linux 3.18
linux linux_kernel 3.18 – 5.10.249
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.15%
Raw Score 0.001500
Percentile 4.2%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00150
2026-11-13
0.00150
2026-11-12
0.00150
2026-11-10
0.00150
2026-11-09
0.00150
2026-11-08
0.00150
2026-11-07
0.00150
2026-11-06
0.00150
2026-11-05
0.00150

Intelligence Sources

mitre ref →
nvd ref →