CVE-2026-23464: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()
In the Linux kernel, the following vulnerability has been resolved:
soc: microchip: mpfs: Fix memory leak in mpfssyscontrollerprobe()
In mpfssyscontrollerprobe(), if ofgetmtddevicebynode() fails, the function returns immediately without freeing the allocated memory for syscontroller, leading to a memory leak.
Fix this by jumping to the outfree label to ensure the memory is properly freed.
Also, consolidate the error handling for the mboxrequestchannel() failure case to use the same label.
Affected Software
Event History
Frequently Asked Questions
What conditions trigger the leak?
The leak occurs when mpfs_sys_controller_probe() calls of_get_mtd_device_by_node() and that call fails. The allocated sys_controller memory is not freed before the function returns.
Who is exposed to this issue?
Systems using the Linux kernel MPFS driver are affected when the vulnerable probe error path is reached. Exploitation requires local access with low privileges; no user interaction is required.
What is the impact of repeated failures?
Repeated triggering of the affected error path can leak kernel memory and lead to an availability impact. The CVSS vector identifies availability as the only affected security property.
Is there a related error path covered by the fix?
Yes. The change also consolidates handling of mbox_request_channel() failures so that this path uses the same cleanup label.