CVE-2026-23176: platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: toshibahaps: Fix memory leaks in add/remove routines
toshibahapsadd() leaks the haps object allocated by it if it returns an error after allocating that object successfully.
toshibahapsremove() does not free the object pointed to by toshibahaps before clearing that pointer, so it becomes unreachable allocated memory.
Address these memory leaks by using devmkzalloc() for allocating the memory in question.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23176?
CVE-2026-23176 has a medium severity rating due to memory leak vulnerabilities in certain routines.
How do I fix CVE-2026-23176?
To fix CVE-2026-23176, update the Linux kernel to a patched version that resolves the memory leak issues.
What systems are affected by CVE-2026-23176?
CVE-2026-23176 affects the Linux kernel specifically in the Toshiba HAPS platform.
What are the potential impacts of CVE-2026-23176?
The potential impacts of CVE-2026-23176 include degraded system performance and increased memory usage over time.
Can CVE-2026-23176 be exploited remotely?
CVE-2026-23176 is not considered a remote exploit but rather a local vulnerability affecting the kernel directly.