CVE-2026-97473

Source
https://cve.org/CVERecord?id=CVE-2026-97473
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97473.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97473
Downstream
Published
2026-09-24T16:04:15Z
Modified
2026-10-08T02:52:42Z
Summary
powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()
Details

In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()

When topology_physical_package_id()/topology_logical_die_id() returns a negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL) directly without freeing the rapl_package structure that was just allocated by kzalloc_obj(), leaking memory on every failed package addition.

Use the existing err_free_package label so that the allocation is released on the error path.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97473.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
26096aed255fbac9501718174dbb24c935d8854e
Fixed
3e9e9337e03be946ec93f2c9d28dab242482be1b
Fixed
992c60771749d8d8cbfbd06049785fff95c72df1
Fixed
bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.10.12
Fixed
6.11
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.11.1
Fixed
6.12
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f8a7fa068be099fe3406178ab047cba7c8456203
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f575a20bd53ea755800e79c2b7aea20e9b0b2242

Affected versions

v6.*
v6.10.12
v6.10.13
v6.10.14
v6.11.1
v6.11.10
v6.11.11
v6.11.2
v6.11.3
v6.11.4
v6.11.5
v6.11.6
v6.11.7
v6.11.8
v6.11.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97473.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97473.json"