CVE-2026-23160
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-02-14
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix memory leak in octep_device_setup() In octep_device_setup(), if octep_ctrl_net_init() fails, the function returns directly without unmapping the mapped resources and freeing the allocated configuration memory. Fix this by jumping to the unsupported_dev label, which performs the necessary cleanup. This aligns with the error handling logic of other paths in this function. Compile tested only. Issue found using a prototype static analysis tool and code review.
Weakness Classification (1)
Affected Software (13)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 577f0d1b1c5f3282fa2011177b0af692a7c21aee < 5058d3f8f17202e673f90af1446252322bd0850f |
| Linux | Linux | 577f0d1b1c5f3282fa2011177b0af692a7c21aee < fdfd28e13c244d7c3345e74f339fd1b67605b694 |
| Linux | Linux | 577f0d1b1c5f3282fa2011177b0af692a7c21aee < d753f3c3f9d7a6e6dbb4d3a97b73007d71624551 |
| Linux | Linux | 577f0d1b1c5f3282fa2011177b0af692a7c21aee < 8016dc5ee19a77678c264f8ba368b1e873fa705b |
| Linux | Linux | 6.4 |
| linux | linux_kernel | 6.4 – 6.6.123 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |
| linux | linux_kernel | 6.19 |