CVE-2026-23160

octeon_ep: Fix memory leak in octep_device_setup()

published February 14, 2026

CVSS
—
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

octeon_ep: Fix memory leak in octep_device_setup()

In octep_device_setup(), if octep_ctrl_net_init() fails, the function

returns directly without unmapping the mapped resources and freeing the

allocated configuration memory.

Fix this by jumping to the unsupported_dev label, which performs the

necessary cleanup. This aligns with the error handling logic of other

paths in this function.

Compile tested only. Issue found using a prototype static analysis tool

and code review.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00134 · 2.6th percentile
Published
2026-02-14T16:01Z
EPSS history
Timeline
  • 14 FEB 16:01Z
    octeon_ep: Fix memory leak in octep_device_setup()
    cvelistv5