CVE-2026-23337: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf_generic_parse_dt_config(), if parse_dt_cfg() fails, it returns directly. This bypasses the cleanup logic and results in a memory leak of the cfg buffer. Fix this by jumping to the out label on failure, ensuring kfree(cfg) is called before returning.

Засегнати продукти

• Linux Linux: 90a18c512884adb49ddc2fb30e94594169aae808 преди 63ee429780a5d43b5b4406c6128109b0f47cf2f1; 90a18c512884adb49ddc2fb30e94594169aae808 преди 7a648d598cb8e8c62af3f0e020a25820a3f3a9a7
• Linux Linux: 6.19; преди 6.19; 6.19.7 до 6.19.*; 7.0 до *

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-23337
• https://nvd.nist.gov/vuln/detail/CVE-2026-23337
• https://git.kernel.org/stable/c/63ee429780a5d43b5b4406c6128109b0f47cf2f1
• https://git.kernel.org/stable/c/7a648d598cb8e8c62af3f0e020a25820a3f3a9a7