CVE-2026-23182: spi: tegra: Fix a memory leak in tegra_slink_probe()
In the Linux kernel, the following vulnerability has been resolved:
spi: tegra: Fix a memory leak in tegraslinkprobe()
In tegraslinkprobe(), when platformgetirq() fails, it directly returns from the function with an error code, which causes a memory leak.
Replace it with a goto label to ensure proper cleanup.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In tegra_slink_probe(), replace the direct error return when platform_get_irq() fails with a goto to a cleanup label so allocated resources are properly released.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23182?
CVE-2026-23182 is classified as a moderate severity vulnerability due to its potential for causing a memory leak.
How do I fix CVE-2026-23182?
To fix CVE-2026-23182, update your Linux kernel to a version that includes the patch for the tegra_slink_probe() memory leak.
Which versions of the Linux kernel are affected by CVE-2026-23182?
CVE-2026-23182 affects specific versions of the Linux kernel that contain the implementation of tegra_slink_probe().
What is tegra_slink_probe() related to CVE-2026-23182?
tegra_slink_probe() is a function in the Linux kernel responsible for handling SPI devices, where the memory leak vulnerability occurs.
Is CVE-2026-23182 actively exploited?
As of now, there are no known active exploitation attempts specifically targeting CVE-2026-23182.