CVE-2026-23337 in Linux Kernel
Zusammenfassung (Englisch)
In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf_generic_parse_dt_config(), if parse_dt_cfg() fails, it returns directly. This bypasses the cleanup logic and results in a memory leak of the cfg buffer. Fix this by jumping to the out label on failure, ensuring kfree(cfg) is called before returning.
Zuständig
Linux
Reservieren
13.01.2026
Veröffentlichung
25.03.2026
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 353082 | Linux Kernel pinctrl pinconf_generic_parse_dt_config Denial of Service | 401 | Nicht definiert | Offizieller Fix | CVE-2026-23337 |