CVE-2026-23176
Unknown Unknown - Not Provided
Memory Leak in Linux Kernel Toshiba_HAPS Component Fixed

Publication date: 2026-02-14

Last updated on: 2026-02-14

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_haps: Fix memory leaks in add/remove routines toshiba_haps_add() leaks the haps object allocated by it if it returns an error after allocating that object successfully. toshiba_haps_remove() does not free the object pointed to by toshiba_haps before clearing that pointer, so it becomes unreachable allocated memory. Address these memory leaks by using devm_kzalloc() for allocating the memory in question.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-14
Last Modified
2026-02-14
Generated
2026-06-16
AI Q&A
2026-02-14
EPSS Evaluated
2026-06-15
NVD
CVE-2026-23176
EUVD
EUVD-2026-5862
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
toshiba haps *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is related to memory leaks in the Linux kernel's Toshiba HAPS driver for the x86 platform. Specifically, the function toshiba_haps_add() leaks memory when it returns an error after successfully allocating a haps object. Additionally, the toshiba_haps_remove() function does not free the allocated haps object before clearing its pointer, causing the allocated memory to become unreachable and thus leaked.

The issue was fixed by changing the memory allocation method to use devm_kzalloc(), which manages the memory lifecycle more effectively and prevents these leaks.

Impact Analysis

This vulnerability can lead to memory leaks in the Linux kernel when using the Toshiba HAPS driver. Over time, these leaks could cause increased memory usage, potentially leading to degraded system performance or instability if the leaked memory accumulates significantly.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

This vulnerability involves memory leaks in the toshiba_haps driver routines in the Linux kernel.

To mitigate this issue, the memory allocation should be changed to use devm_kzalloc() in the affected routines to properly manage memory and prevent leaks.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23176. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart