CVE-2026-23090

slimbus: core: fix device reference leak on report present

State: Published
Severity: Not scored
Published: Feb 4, 2026
Updated: May 11, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

slimbus: core: fix device reference leak on report present

Slimbus devices can be allocated dynamically upon reception of report-present messages.

Make sure to drop the reference taken when looking up already registered devices.

Note that this requires taking an extra reference in case the device has not yet been registered and has to be allocated.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before b1217e40705b2f6d311c197b12866752656217ffAffected 46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 948615429c9f2ac9d25d4e1f1a4472926b217a9aAffected 46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 02b78bbfbafe49832e508079148cb87cdfa55825Affected 46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 2ddc09f6a0a221b1d91a7cbc8cc2cefdbd334fe6Affected 46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 54de72a7aabc0749938d7a2833a0c1a5d3ed7ac9Affected 46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 6602bb4d1338e92b5838e50322b87697bdbd2ee0Affected 46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 9391380eb91ea5ac792aae9273535c8da5b9aa01Affected
LinuxLinux	4.16Affected before 4.16Not affected 5.10.249 through 5.10.Not affected 5.15.199 through 5.15.Not affected 6.1.162 through 6.1.Not affected 6.6.122 through 6.6.Not affected 6.12.68 through 6.12.Not affected 6.18.8 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before b1217e40705b2f6d311c197b12866752656217ffAffected
46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 948615429c9f2ac9d25d4e1f1a4472926b217a9aAffected
46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 02b78bbfbafe49832e508079148cb87cdfa55825Affected
46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 2ddc09f6a0a221b1d91a7cbc8cc2cefdbd334fe6Affected
46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 54de72a7aabc0749938d7a2833a0c1a5d3ed7ac9Affected
46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 6602bb4d1338e92b5838e50322b87697bdbd2ee0Affected
46a2bb5a7f7ea2728be50f8f5b29a20267f700fe to before 9391380eb91ea5ac792aae9273535c8da5b9aa01Affected

LinuxLinux

4.16Affected
before 4.16Not affected
5.10.249 through 5.10.*Not affected
5.15.199 through 5.15.*Not affected
6.1.162 through 6.1.*Not affected
6.6.122 through 6.6.*Not affected
6.12.68 through 6.12.*Not affected
6.18.8 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.