CVE-2026-23464
Analyzed Analyzed - Analysis Complete
Memory Leak in Linux Kernel Microchip MPFS sys_controller Probe

Publication date: 2026-04-03

Last updated on: 2026-05-20

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() In mpfs_sys_controller_probe(), if of_get_mtd_device_by_node() fails, the function returns immediately without freeing the allocated memory for sys_controller, leading to a memory leak. Fix this by jumping to the out_free label to ensure the memory is properly freed. Also, consolidate the error handling for the mbox_request_channel() failure case to use the same label.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-03
Last Modified
2026-05-20
Generated
2026-06-16
AI Q&A
2026-04-03
EPSS Evaluated
2026-06-15
NVD
CVE-2026-23464
EUVD
EUVD-2026-18728
Affected Vendors & Products
Showing 7 associated CPEs
Vendor Product Version / Range
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel From 6.13 (inc) to 6.18.20 (exc)
linux linux_kernel From 6.19 (inc) to 6.19.10 (exc)
linux linux_kernel From 6.8 (inc) to 6.12.78 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-401 The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability exists in the Linux kernel's microchip mpfs driver, specifically in the function mpfs_sys_controller_probe(). When the function of_get_mtd_device_by_node() fails, the code returns immediately without freeing the memory allocated for sys_controller. This causes a memory leak because the allocated memory is not properly released.

The fix involves changing the code to jump to a cleanup label (out_free) to ensure that the allocated memory is freed even if of_get_mtd_device_by_node() fails. Additionally, error handling for another failure case (mbox_request_channel()) was consolidated to use the same cleanup label.

Impact Analysis

This vulnerability can lead to a memory leak in the Linux kernel when the affected function fails to free allocated memory. Over time, this memory leak could cause increased memory usage, potentially leading to degraded system performance or instability, especially on systems running the affected microchip mpfs driver.

Mitigation Strategies

To mitigate this vulnerability, update the Linux kernel to a version where the memory leak in mpfs_sys_controller_probe() has been fixed. This fix ensures that allocated memory is properly freed when of_get_mtd_device_by_node() or mbox_request_channel() fails.

If updating is not immediately possible, monitor the system for unusual memory usage patterns related to the microchip mpfs subsystem and consider limiting the use of affected components until a patch is applied.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-23464. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart