CVE-2026-23464
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/04/2026
Last modified:
03/04/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()<br />
<br />
In mpfs_sys_controller_probe(), if of_get_mtd_device_by_node() fails,<br />
the function returns immediately without freeing the allocated memory<br />
for sys_controller, leading to a memory leak.<br />
<br />
Fix this by jumping to the out_free label to ensure the memory is<br />
properly freed.<br />
<br />
Also, consolidate the error handling for the mbox_request_channel()<br />
failure case to use the same label.



