CVE-2026-99023: power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()
Published Oct 23, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
power: sequencing: pcie-m2: Fix leaking array from ofregulatorbulkgetall()
ofregulatorbulkgetall() allocates the consumers array and hands it to the caller, who is expected to free it at an appropriate time. pwrseq-pcie-m2.c never did, leading to a memory leak.
Add an explicit kfree() for the consumers array.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In pwrseq-pcie-m2.c, explicitly call kfree() on the consumers array returned by of_regulator_bulk_get_all() at the appropriate cleanup point to prevent the memory leak.
Event History
Oct 23, 2026
CVE Published
via MITRE·12:21 PM
Data Sourced
via MITRE·12:21 PM
Description