CVE-2026-23160
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/02/2026
Last modified:
14/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
octeon_ep: Fix memory leak in octep_device_setup()<br />
<br />
In octep_device_setup(), if octep_ctrl_net_init() fails, the function<br />
returns directly without unmapping the mapped resources and freeing the<br />
allocated configuration memory.<br />
<br />
Fix this by jumping to the unsupported_dev label, which performs the<br />
necessary cleanup. This aligns with the error handling logic of other<br />
paths in this function.<br />
<br />
Compile tested only. Issue found using a prototype static analysis tool<br />
and code review.



