← Retour à la recherche de CVE

CVE-2026-23337

Linux Kernel

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf_generic_parse_dt_config(), if parse_dt_cfg() fails, it returns directly. This bypasses the cleanup logic and results in a memory leak of the cfg buffer. Fix this by jumping to the out label on failure, ensuring kfree(cfg) is called before returning.

CVSS 5.5EPSS 0.117%Risque 0.56
Voir la source
Publication
2026-03-25 11:16:31
Versions concernées
unknown
Type
Core software
Vecteur
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Systèmes d’exploitation
Linux