CVE-2026-23022

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-23022
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23022.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-23022
Downstream
Published
2026-01-31T11:39:05.973Z
Modified
2026-02-09T19:35:00.345501Z
Summary
idpf: fix memory leak in idpf_vc_core_deinit()
Details

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix memory leak in idpfvccore_deinit()

Make sure to free hw->lan_regs. Reported by kmemleak during reset:

unreferenced object 0xff1b913d02a936c0 (size 96): comm "kworker/u258:14", pid 2174, jiffies 4294958305 hex dump (first 32 bytes): 00 00 00 c0 a8 ba 2d ff 00 00 00 00 00 00 00 00 ......-......... 00 00 40 08 00 00 00 00 00 00 25 b3 a8 ba 2d ff ..@.......%...-. backtrace (crc 36063c4f): _kmallocnoprof+0x48f/0x890 idpfvccoreinit+0x6ce/0x9b0 [idpf] idpfvceventtask+0x1fb/0x350 [idpf] processonework+0x226/0x6d0 workerthread+0x19e/0x340 kthread+0x10f/0x250 retfromfork+0x251/0x2b0 retfromforkasm+0x1a/0x30

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23022.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6aa53e861c1a0c042690c9b7c5c153088ae61079
Fixed
23391db8a00c23854915b8b72ec1aa10080aa540
Fixed
e111cbc4adf9f9974eed040aeece7e17460f6bff

Affected versions

v6.*
v6.16
v6.16-rc2
v6.16-rc3
v6.16-rc4
v6.16-rc5
v6.16-rc6
v6.16-rc7
v6.17
v6.17-rc1
v6.17-rc2
v6.17-rc3
v6.17-rc4
v6.17-rc5
v6.17-rc6
v6.17-rc7
v6.18
v6.18-rc1
v6.18-rc2
v6.18-rc3
v6.18-rc4
v6.18-rc5
v6.18-rc6
v6.18-rc7
v6.18.1
v6.18.2
v6.18.3
v6.18.4
v6.18.5
v6.19-rc1
v6.19-rc2
v6.19-rc3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23022.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.17.0
Fixed
6.18.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23022.json"