UBUNTU-CVE-2026-97473: Low severity ubuntu/linux vulnerability
In the Linux kernel, the following vulnerability has been resolved: powercap: intelrapl: Fix memory leak in rapladdpackagecpuslocked() When topologyphysicalpackageid()/topologylogicaldieid() returns a negative value, rapladdpackagecpuslocked() returns ERRPTR(-EINVAL) directly without freeing the raplpackage structure that was just allocated by kzallocobj(), leaking memory on every failed package addition. Use the existing errfreepackage label so that the allocation is released on the error path.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1 - Compensating control
In rapl_add_package_cpuslocked(), route the negative topology_physical_package_id()/topology_logical_die_id() error path through the existing err_free_package label so the kzalloc_obj()-allocated rapl_package structure is freed before returning ERR_PTR(-EINVAL).