CVE-2026-23160: octeon_ep: Fix memory leak in octep_device_setup()
In the Linux kernel, the following vulnerability has been resolved:
octeonep: Fix memory leak in octepdevicesetup()
In octepdevicesetup(), if octepctrlnetinit() fails, the function returns directly without unmapping the mapped resources and freeing the allocated configuration memory.
Fix this by jumping to the unsupporteddev label, which performs the necessary cleanup. This aligns with the error handling logic of other paths in this function.
Compile tested only. Issue found using a prototype static analysis tool and code review.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23160?
CVE-2026-23160 is rated as a medium severity vulnerability due to its potential to cause a memory leak.
How do I fix CVE-2026-23160?
To fix CVE-2026-23160, ensure you upgrade to a patched version of the Linux kernel where the memory leak issue has been addressed.
What systems are affected by CVE-2026-23160?
CVE-2026-23160 affects the Linux kernel, particularly versions that include the octeon_ep device driver.
What are the consequences of not addressing CVE-2026-23160?
Failing to address CVE-2026-23160 may lead to resource wastage and possible system instability over time due to memory leaks.
How can I identify if my system is vulnerable to CVE-2026-23160?
You can identify if your system is vulnerable to CVE-2026-23160 by checking the kernel version for any known susceptible releases.