CVE-2026-23137: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: of: unittest: Fix memory leak in unittest_data_add() In unittest_data_add(), if of_resolve_phandles() fails, the allocated unittest_data is not freed, leading to a memory leak. Fix this by using scope-based cleanup helper __free(kfree) for automatic resource cleanup. This ensures unittest_data is automatically freed when it goes out of scope in error paths. For the success path, use retain_and_null_ptr() to transfer ownership of the memory to the device tree and prevent double freeing.

Засегнати продукти

• Linux Linux: 2eb46da2a760e5764c48b752a5ef320e02b96b21 преди 4bafaec9e3a784d103ab9da11095708fcca70e76; 2eb46da2a760e5764c48b752a5ef320e02b96b21 преди 4c7ad40c285ab85e3614433e063f14aac2e2fe17; 2eb46da2a760e5764c48b752a5ef320e02b96b21 преди 58baf98d1bdab897fd796f39a16061bade229d71; 2eb46da2a760e5764c48b752a5ef320e02b96b21 преди f09b0f705bd7197863b90256ef533a6414d1db2c; 2eb46da2a760e5764c48b752a5ef320e02b96b21 преди 235a1eb8d2dcc49a6cf0a5ee1aa85544a5d0054b
• Linux Linux: 3.18; преди 3.18; 6.1.191 до 6.1.*; 6.6.160 до 6.6.*; 6.12.110 до 6.12.*; 6.18.6 до 6.18.*; от 6.19 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23137
• https://nvd.nist.gov/vuln/detail/CVE-2026-23137
• https://git.kernel.org/stable/c/4bafaec9e3a784d103ab9da11095708fcca70e76
• https://git.kernel.org/stable/c/4c7ad40c285ab85e3614433e063f14aac2e2fe17
• https://git.kernel.org/stable/c/58baf98d1bdab897fd796f39a16061bade229d71
• https://git.kernel.org/stable/c/f09b0f705bd7197863b90256ef533a6414d1db2c
• https://git.kernel.org/stable/c/235a1eb8d2dcc49a6cf0a5ee1aa85544a5d0054b