CVE-2026-23464

soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()

published April 3, 2026

CVSS
—
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()

In mpfs_sys_controller_probe(), if of_get_mtd_device_by_node() fails,

the function returns immediately without freeing the allocated memory

for sys_controller, leading to a memory leak.

Fix this by jumping to the out_free label to ensure the memory is

properly freed.

Also, consolidate the error handling for the mbox_request_channel()

failure case to use the same label.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00122 · 1.8th percentile
Published
2026-04-03T15:15Z
EPSS history
Timeline
  • 03 APR 15:15Z
    soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()
    cvelistv5