CVE-2026-23337

pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()

published March 25, 2026

CVSS
—
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()

In pinconf_generic_parse_dt_config(), if parse_dt_cfg() fails, it returns

directly. This bypasses the cleanup logic and results in a memory leak of

the cfg buffer.

Fix this by jumping to the out label on failure, ensuring kfree(cfg) is

called before returning.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00122 · 1.8th percentile
Published
2026-03-25T10:27Z
EPSS history
Timeline
  • 25 MAR 10:27Z
    pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()
    cvelistv5