CVE-2026-23260
Analyzed Analyzed - Analysis Complete

Memory Leak in Linux Kernel regmap Maple on Allocation Failure

Publication date: 2026-03-18

Last updated on: 2026-05-29

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: regmap: maple: free entry on mas_store_gfp() failure regcache_maple_write() allocates a new block ('entry') to merge adjacent ranges and then stores it with mas_store_gfp(). When mas_store_gfp() fails, the new 'entry' remains allocated and is never freed, leaking memory. Free 'entry' on the failure path; on success continue freeing the replaced neighbor blocks ('lower', 'upper').

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-18
Last Modified
2026-05-29
Generated
2026-07-27
AI Q&A
2026-03-18
EPSS Evaluated
2026-07-25
NVD
CVE-2026-23260
EUVD
EUVD-2026-12894

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel 6.19
linux linux_kernel From 6.7 (inc) to 6.12.70 (exc)
linux linux_kernel 6.19
linux linux_kernel From 6.13 (inc) to 6.18.10 (exc)
linux linux_kernel From 6.4 (inc) to 6.6.124 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-401 The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's regmap maple component. Specifically, when the function regcache_maple_write() tries to allocate a new block called 'entry' to merge adjacent ranges, it uses mas_store_gfp() to store it. If mas_store_gfp() fails, the newly allocated 'entry' is not freed, causing a memory leak.

Detection Guidance

I don't know

Impact Analysis

The impact of this vulnerability is a memory leak in the Linux kernel. Over time, repeated failures in mas_store_gfp() could cause the system to consume more memory than expected, potentially leading to degraded performance or system instability.

Compliance Impact

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23260. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart