CVE-2026-23137
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-02-14
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: of: unittest: Fix memory leak in unittest_data_add() In unittest_data_add(), if of_resolve_phandles() fails, the allocated unittest_data is not freed, leading to a memory leak. Fix this by using scope-based cleanup helper __free(kfree) for automatic resource cleanup. This ensures unittest_data is automatically freed when it goes out of scope in error paths. For the success path, use retain_and_null_ptr() to transfer ownership of the memory to the device tree and prevent double freeing.
Weakness Classification (1)
Affected Software (11)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 2eb46da2a760e5764c48b752a5ef320e02b96b21 < 4bafaec9e3a784d103ab9da11095708fcca70e76 |
| Linux | Linux | 2eb46da2a760e5764c48b752a5ef320e02b96b21 < 4c7ad40c285ab85e3614433e063f14aac2e2fe17 |
| Linux | Linux | 2eb46da2a760e5764c48b752a5ef320e02b96b21 < 58baf98d1bdab897fd796f39a16061bade229d71 |
| Linux | Linux | 2eb46da2a760e5764c48b752a5ef320e02b96b21 < f09b0f705bd7197863b90256ef533a6414d1db2c |
| Linux | Linux | 2eb46da2a760e5764c48b752a5ef320e02b96b21 < 235a1eb8d2dcc49a6cf0a5ee1aa85544a5d0054b |
| Linux | Linux | 3.18 |
| linux | linux_kernel | 3.18 – 6.18.6 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |