CVE-2026-23022: idpf: fix memory leak in idpf_vc_core_deinit()
In the Linux kernel, the following vulnerability has been resolved:
idpf: fix memory leak in idpfvccoredeinit()
Make sure to free hw->lanregs. Reported by kmemleak during reset:
unreferenced object 0xff1b913d02a936c0 (size 96): comm "kworker/u258:14", pid 2174, jiffies 4294958305 hex dump (first 32 bytes): 00 00 00 c0 a8 ba 2d ff 00 00 00 00 00 00 00 00 ......-......... 00 00 40 08 00 00 00 00 00 00 25 b3 a8 ba 2d ff ..@.......%...-. backtrace (crc 36063c4f): kmallocnoprof+0x48f/0x890 idpfvccoreinit+0x6ce/0x9b0 [idpf] idpfvceventtask+0x1fb/0x350 [idpf] processonework+0x226/0x6d0 workerthread+0x19e/0x340 kthread+0x10f/0x250 retfromfork+0x251/0x2b0 retfromforkasm+0x1a/0x30
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23022?
CVE-2026-23022 has been classified as a moderate severity vulnerability.
How do I fix CVE-2026-23022?
To fix CVE-2026-23022, ensure that your system is updated to the latest version of the Linux kernel that includes the patch.
What software is affected by CVE-2026-23022?
CVE-2026-23022 affects the Linux kernel due to a memory leak in the idpf_vc_core_deinit() function.
What is the impact of CVE-2026-23022?
The impact of CVE-2026-23022 is mainly a potential memory leak, which could lead to reduced system performance over time.
Who reported CVE-2026-23022?
CVE-2026-23022 was reported by kmemleak during a reset process.