{"id":"CVE-2026-23160","title":"octeon_ep: Fix memory leak in octep_device_setup()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nocteon_ep: Fix memory leak in octep_device_setup()\n\nIn octep_device_setup(), if octep_ctrl_net_init() fails, the function\nreturns directly without unmapping the mapped …","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < 5058d3f8f17202e673f90af1446252322bd0850f","Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < fdfd28e13c244d7c3345e74f339fd1b67605b694","Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < d753f3c3f9d7a6e6dbb4d3a97b73007d71624551","Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < 8016dc5ee19a77678c264f8ba368b1e873fa705b","Linux 6.4"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:21:10.579791Z"},"published":"2026-02-14","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:23:20.205Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23160","references":[{"url":"https://git.kernel.org/stable/c/5058d3f8f17202e673f90af1446252322bd0850f"},{"url":"https://git.kernel.org/stable/c/fdfd28e13c244d7c3345e74f339fd1b67605b694"},{"url":"https://git.kernel.org/stable/c/d753f3c3f9d7a6e6dbb4d3a97b73007d71624551"},{"url":"https://git.kernel.org/stable/c/8016dc5ee19a77678c264f8ba368b1e873fa705b"}],"tags":["cve.org"],"epss":0.00134,"epssPercentile":0.02901,"ingestedAt":"2026-11-05T22:38:32.079Z","slug":"CVE-2026-23160","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocteon_ep: Fix memory leak in octep_device_setup()\n\nIn octep_device_setup(), if octep_ctrl_net_init() fails, the function\nreturns directly without unmapping the mapped resources and freeing the\nallocated configuration memory.\n\nFix this by jumping to the unsupported_dev label, which performs the\nnecessary cleanup. This aligns with the error handling logic of other\npaths in this function.\n\nCompile tested only. Issue found using a prototype static analysis tool\nand code review.\n\n## Affected\n\n- `Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < 5058d3f8f17202e673f90af1446252322bd0850f`\n- `Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < fdfd28e13c244d7c3345e74f339fd1b67605b694`\n- `Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < d753f3c3f9d7a6e6dbb4d3a97b73007d71624551`\n- `Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < 8016dc5ee19a77678c264f8ba368b1e873fa705b`\n- `Linux 6.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}