Riskcovery

CVE-2026-23337

pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()

State
Published
Severity
Not scored
Published
Mar 25, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()

In pinconf_generic_parse_dt_config(), if parse_dt_cfg() fails, it returns directly. This bypasses the cleanup logic and results in a memory leak of the cfg buffer.

Fix this by jumping to the out label on failure, ensuring kfree(cfg) is called before returning.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 90a18c512884adb49ddc2fb30e94594169aae808 to before 63ee429780a5d43b5b4406c6128109b0f47cf2f1Affected
  • 90a18c512884adb49ddc2fb30e94594169aae808 to before 7a648d598cb8e8c62af3f0e020a25820a3f3a9a7Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 6.19.7 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.