CVE-2026-23023

idpf: fix memory leak in idpf_vport_rel()

published January 31, 2026

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

idpf: fix memory leak in idpf_vport_rel()

Free vport->rx_ptype_lkup in idpf_vport_rel() to avoid leaking memory

during a reset. Reported by kmemleak:

unreferenced object 0xff450acac838a000 (size 4096):

comm "kworker/u258:5", pid 7732, jiffies 4296830044

hex dump (first 32 bytes):

00 00 00 00 00 10 00 00 00 10 00 00 00 00 00 00 ................

00 00 00 00 00 00 00 00 00 10 00 00 00 00 00 00 ................

backtrace (crc 3da81902):

__kmalloc_cache_noprof+0x469/0x7a0

idpf_send_get_rx_ptype_msg+0x90/0x570 [idpf]

idpf_init_task+0x1ec/0x8d0 [idpf]

process_one_work+0x226/0x6d0

worker_thread+0x19e/0x340

kthread+0x10f/0x250

ret_from_fork+0x251/0x2b0

ret_from_fork_asm+0x1a/0x30

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2026-01-31T11:39Z
EPSS history
Timeline
  • 31 JAN 11:39Z
    idpf: fix memory leak in idpf_vport_rel()
    cvelistv5