CVE-2026-23021: net: usb: pegasus: fix memory leak in update_eth_regs_async()
In the Linux kernel, the following vulnerability has been resolved:
net: usb: pegasus: fix memory leak in updateethregsasync()
When asynchronously writing to the device registers and if usbsubmiturb() fail, the code fail to release allocated to this point resources.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23021?
CVE-2026-23021 is classified as a low severity vulnerability due to its specific impact on memory leak handling.
How do I fix CVE-2026-23021?
To fix CVE-2026-23021, you should apply the latest patches from the Linux kernel updates that address this memory leak issue.
What systems are affected by CVE-2026-23021?
CVE-2026-23021 affects Linux kernel versions that utilize the Pegasus USB driver.
What is the impact of CVE-2026-23021?
The impact of CVE-2026-23021 is primarily a memory leak that can lead to resource exhaustion over time.
Is CVE-2026-23021 being exploited in the wild?
As of now, there are no reported active exploits for CVE-2026-23021 in the wild.