CVE-2026-23176
Unknown Unknown - Not Provided

Memory Leak in Linux Kernel Toshiba_HAPS Component Fixed

Publication date: 2026-02-14

Last updated on: 2026-02-14

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_haps: Fix memory leaks in add/remove routines toshiba_haps_add() leaks the haps object allocated by it if it returns an error after allocating that object successfully. toshiba_haps_remove() does not free the object pointed to by toshiba_haps before clearing that pointer, so it becomes unreachable allocated memory. Address these memory leaks by using devm_kzalloc() for allocating the memory in question.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-14
Last Modified
2026-02-14
Generated
2026-07-06
AI Q&A
2026-02-14
EPSS Evaluated
2026-07-05
NVD
CVE-2026-23176
EUVD
EUVD-2026-5862

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
toshiba haps *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is related to memory leaks in the Linux kernel's Toshiba HAPS driver for the x86 platform. Specifically, the function toshiba_haps_add() leaks memory when it returns an error after successfully allocating a haps object. Additionally, the toshiba_haps_remove() function does not free the allocated haps object before clearing its pointer, causing the allocated memory to become unreachable and thus leaked.

The issue was fixed by changing the memory allocation method to use devm_kzalloc(), which manages the memory lifecycle more effectively and prevents these leaks.

Impact Analysis

This vulnerability can lead to memory leaks in the Linux kernel when using the Toshiba HAPS driver. Over time, these leaks could cause increased memory usage, potentially leading to degraded system performance or instability if the leaked memory accumulates significantly.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

This vulnerability involves memory leaks in the toshiba_haps driver routines in the Linux kernel.

To mitigate this issue, the memory allocation should be changed to use devm_kzalloc() in the affected routines to properly manage memory and prevent leaks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23176. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart