CVE-2026-23176

platform/x86: toshiba_haps: Fix memory leaks in add/remove routines

State: Published
Severity: Not scored
Published: Feb 14, 2026
Updated: May 11, 2026
Reserved: Jan 13, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: toshiba_haps: Fix memory leaks in add/remove routines

toshiba_haps_add() leaks the haps object allocated by it if it returns an error after allocating that object successfully.

toshiba_haps_remove() does not free the object pointed to by toshiba_haps before clearing that pointer, so it becomes unreachable allocated memory.

Address these memory leaks by using devm_kzalloc() for allocating the memory in question.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	23d0ba0c908ac10139f0351023c64198d7fc1409 to before 17f37c4cdf42a9e4915216b9e130fc8baef4cc64Affected 23d0ba0c908ac10139f0351023c64198d7fc1409 to before 5bce10f0f9435afaae3fc4df9a52b01d9b3853dcAffected 23d0ba0c908ac10139f0351023c64198d7fc1409 to before f2093e87ddec13e7a920f326c078a5f765ba89c3Affected 23d0ba0c908ac10139f0351023c64198d7fc1409 to before ca9ff71c15bc8e48529c2033294a519a7749b272Affected 23d0ba0c908ac10139f0351023c64198d7fc1409 to before bf0474356875d005d420f8c6b9ac168566e72e87Affected 23d0ba0c908ac10139f0351023c64198d7fc1409 to before f93ae43780b759a70734be9bc82c1adcf7f33208Affected 23d0ba0c908ac10139f0351023c64198d7fc1409 to before 128497456756e1b952bd5a912cd073836465109dAffected
LinuxLinux	3.17Affected before 3.17Not affected 5.10.250 through 5.10.Not affected 5.15.200 through 5.15.Not affected 6.1.163 through 6.1.Not affected 6.6.124 through 6.6.Not affected 6.12.70 through 6.12.Not affected 6.18.10 through 6.18.Not affected 6.19 and laterNot affected

Product

Versions

LinuxLinux

23d0ba0c908ac10139f0351023c64198d7fc1409 to before 17f37c4cdf42a9e4915216b9e130fc8baef4cc64Affected
23d0ba0c908ac10139f0351023c64198d7fc1409 to before 5bce10f0f9435afaae3fc4df9a52b01d9b3853dcAffected
23d0ba0c908ac10139f0351023c64198d7fc1409 to before f2093e87ddec13e7a920f326c078a5f765ba89c3Affected
23d0ba0c908ac10139f0351023c64198d7fc1409 to before ca9ff71c15bc8e48529c2033294a519a7749b272Affected
23d0ba0c908ac10139f0351023c64198d7fc1409 to before bf0474356875d005d420f8c6b9ac168566e72e87Affected
23d0ba0c908ac10139f0351023c64198d7fc1409 to before f93ae43780b759a70734be9bc82c1adcf7f33208Affected
23d0ba0c908ac10139f0351023c64198d7fc1409 to before 128497456756e1b952bd5a912cd073836465109dAffected

LinuxLinux

3.17Affected
before 3.17Not affected
5.10.250 through 5.10.*Not affected
5.15.200 through 5.15.*Not affected
6.1.163 through 6.1.*Not affected
6.6.124 through 6.6.*Not affected
6.12.70 through 6.12.*Not affected
6.18.10 through 6.18.*Not affected
6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.