{"id":"CVE-2026-23176","title":"platform/x86: toshiba_haps: Fix memory leaks in add/remove routines","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: toshiba_haps: Fix memory leaks in add/remove routines\n\ntoshiba_haps_add() leaks the haps object allocated by it if it returns\nan error after allocating th…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < 17f37c4cdf42a9e4915216b9e130fc8baef4cc64","Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < 5bce10f0f9435afaae3fc4df9a52b01d9b3853dc","Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < f2093e87ddec13e7a920f326c078a5f765ba89c3","Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < ca9ff71c15bc8e48529c2033294a519a7749b272","Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < bf0474356875d005d420f8c6b9ac168566e72e87","Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < f93ae43780b759a70734be9bc82c1adcf7f33208","Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < 128497456756e1b952bd5a912cd073836465109d","Linux 3.17"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:21:32.986457Z"},"published":"2026-02-14","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:23:20.885Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23176","references":[{"url":"https://git.kernel.org/stable/c/17f37c4cdf42a9e4915216b9e130fc8baef4cc64"},{"url":"https://git.kernel.org/stable/c/5bce10f0f9435afaae3fc4df9a52b01d9b3853dc"},{"url":"https://git.kernel.org/stable/c/f2093e87ddec13e7a920f326c078a5f765ba89c3"},{"url":"https://git.kernel.org/stable/c/ca9ff71c15bc8e48529c2033294a519a7749b272"},{"url":"https://git.kernel.org/stable/c/bf0474356875d005d420f8c6b9ac168566e72e87"},{"url":"https://git.kernel.org/stable/c/f93ae43780b759a70734be9bc82c1adcf7f33208"},{"url":"https://git.kernel.org/stable/c/128497456756e1b952bd5a912cd073836465109d"}],"tags":["cve.org"],"epss":0.00202,"epssPercentile":0.10212,"ingestedAt":"2026-11-05T22:38:32.081Z","slug":"CVE-2026-23176","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: toshiba_haps: Fix memory leaks in add/remove routines\n\ntoshiba_haps_add() leaks the haps object allocated by it if it returns\nan error after allocating that object successfully.\n\ntoshiba_haps_remove() does not free the object pointed to by\ntoshiba_haps before clearing that pointer, so it becomes unreachable\nallocated memory.\n\nAddress these memory leaks by using devm_kzalloc() for allocating\nthe memory in question.\n\n## Affected\n\n- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < 17f37c4cdf42a9e4915216b9e130fc8baef4cc64`\n- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < 5bce10f0f9435afaae3fc4df9a52b01d9b3853dc`\n- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < f2093e87ddec13e7a920f326c078a5f765ba89c3`\n- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < ca9ff71c15bc8e48529c2033294a519a7749b272`\n- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < bf0474356875d005d420f8c6b9ac168566e72e87`\n- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < f93ae43780b759a70734be9bc82c1adcf7f33208`\n- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < 128497456756e1b952bd5a912cd073836465109d`\n- `Linux 3.17`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}