Riskcovery

CVE-2026-23464

soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()

State
Published
Severity
Not scored
Published
Apr 3, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()

In mpfs_sys_controller_probe(), if of_get_mtd_device_by_node() fails, the function returns immediately without freeing the allocated memory for sys_controller, leading to a memory leak.

Fix this by jumping to the out_free label to ensure the memory is properly freed.

Also, consolidate the error handling for the mbox_request_channel() failure case to use the same label.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 742aa6c563d29c367edbf0ef7236a7a853ed9be4 to before da4b44c42f40501db35f5d0a6243708a061490a0Affected
  • 742aa6c563d29c367edbf0ef7236a7a853ed9be4 to before e3dd5cffba07de6574165a72851471cd42cc6d15Affected
  • 742aa6c563d29c367edbf0ef7236a7a853ed9be4 to before 17c84fb7cf3971cc621646185d785670e9530ca1Affected
  • 742aa6c563d29c367edbf0ef7236a7a853ed9be4 to before 5a741f8cc6fe62542f955cd8d24933a1b6589cbdAffected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.78 through 6.12.*Not affected
  • 6.18.20 through 6.18.*Not affected
  • 6.19.10 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.