CVE-2026-23037
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
31/01/2026
Last modified:
06/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
can: etas_es58x: allow partial RX URB allocation to succeed<br />
<br />
When es58x_alloc_rx_urbs() fails to allocate the requested number of<br />
URBs but succeeds in allocating some, it returns an error code.<br />
This causes es58x_open() to return early, skipping the cleanup label<br />
&#39;free_urbs&#39;, which leads to the anchored URBs being leaked.<br />
<br />
As pointed out by maintainer Vincent Mailhol, the driver is designed<br />
to handle partial URB allocation gracefully. Therefore, partial<br />
allocation should not be treated as a fatal error.<br />
<br />
Modify es58x_alloc_rx_urbs() to return 0 if at least one URB has been<br />
allocated, restoring the intended behavior and preventing the leak<br />
in es58x_open().
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/611e839d2d552416b498ed5593e10670f61fcd4d
- https://git.kernel.org/stable/c/6c5124a60989051799037834f0a1a4b428718157
- https://git.kernel.org/stable/c/97250eb05e4b6afe787290e8fd97d0675116c61b
- https://git.kernel.org/stable/c/aec888f44853584b5a7cd01249806030cf94a73d
- https://git.kernel.org/stable/c/b1979778e98569c1e78c2c7f16bb24d76541ab00
- https://git.kernel.org/stable/c/ba45e3d6b02c97dbb4578fbae7027fd66f3caa10



