Riskcovery

CVE-2026-23260

regmap: maple: free entry on mas_store_gfp() failure

State
Published
Severity
Not scored
Published
Mar 18, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

regmap: maple: free entry on mas_store_gfp() failure

regcache_maple_write() allocates a new block ('entry') to merge adjacent ranges and then stores it with mas_store_gfp(). When mas_store_gfp() fails, the new 'entry' remains allocated and is never freed, leaking memory.

Free 'entry' on the failure path; on success continue freeing the replaced neighbor blocks ('lower', 'upper').

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f033c26de5a5734625d2dd1dc196745fae186f1b to before d61171cf097156030142643942c217759a9cc806Affected
  • f033c26de5a5734625d2dd1dc196745fae186f1b to before 811b45e2d795d955bb7fd9c816b40036f4fde350Affected
  • f033c26de5a5734625d2dd1dc196745fae186f1b to before f08f2d2907675926ac5657b25f86d921f269602aAffected
  • f033c26de5a5734625d2dd1dc196745fae186f1b to before f3f380ce6b3d5c9805c7e0b3d5bc28d9ec41e2e8Affected
LinuxLinux
  • 6.4Affected
  • before 6.4Not affected
  • 6.6.124 through 6.6.*Not affected
  • 6.12.70 through 6.12.*Not affected
  • 6.18.10 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.