CVE-2026-23022

idpf: fix memory leak in idpf_vc_core_deinit()

published January 31, 2026

CVSS
—
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix memory leak in idpf_vc_core_deinit()

Make sure to free hw->lan_regs. Reported by kmemleak during reset:

unreferenced object 0xff1b913d02a936c0 (size 96):

comm "kworker/u258:14", pid 2174, jiffies 4294958305

hex dump (first 32 bytes):

00 00 00 c0 a8 ba 2d ff 00 00 00 00 00 00 00 00 ......-.........

00 00 40 08 00 00 00 00 00 00 25 b3 a8 ba 2d ff ..@.......%...-.

backtrace (crc 36063c4f):

__kmalloc_noprof+0x48f/0x890

idpf_vc_core_init+0x6ce/0x9b0 [idpf]

idpf_vc_event_task+0x1fb/0x350 [idpf]

process_one_work+0x226/0x6d0

worker_thread+0x19e/0x340

kthread+0x10f/0x250

ret_from_fork+0x251/0x2b0

ret_from_fork_asm+0x1a/0x30

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.9th percentile
Published
2026-01-31T11:39Z
EPSS history
Timeline
  • 31 JAN 11:39Z
    idpf: fix memory leak in idpf_vc_core_deinit()
    cvelistv5