--- id: CVE-2024-26894 title: |- In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() After unregistering the CPU idle device, the memory associated with it is not freed, leading to a … summary: |- In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() After unregistering the CPU idle device, the memory associated with it is not freed, leading to a … severity: medium cvss: 6 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H' cwe: - CWE-770 vendor: linux product: linux_kernel affected: - 'linux_kernel >= 3.7, < 4.19.311' - 'linux_kernel >= 4.20, < 5.4.273' - 'linux_kernel >= 5.5, < 5.10.214' - 'linux_kernel >= 5.11, < 5.15.153' - 'linux_kernel >= 5.16, < 6.1.83' - 'linux_kernel >= 6.2, < 6.6.23' - 'linux_kernel >= 6.7, < 6.7.11' - 'linux_kernel >= 6.8, < 6.8.2' - debian_linux = 10.0 patched: - linux_kernel 6.8.2 published: '2024-04-17' updated: '2026-10-15' sourceUpdated: '2026-10-15T01:17:29.870' source: NVD sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2024-26894' references: - url: 'https://git.kernel.org/stable/c/1cbaf4c793b0808532f4e7b40bc4be7cec2c78f2' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/3d48e5be107429ff5d824e7f2a00d1b610d36fbc' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/8d14a4d0afb49a5b8535d414c782bb334860e73e' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/c2a30c81bf3cb9033fa9f5305baf7c377075e2e5' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/cd5c2d0b09d5b6d3f0a7bbabe6761a4997e9dee9' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/d351bcadab6caa6d8ce7159ff4b77e2da35c09fa' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/e18afcb7b2a12b635ac10081f943fcf84ddacc51' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/ea96bf3f80625cddba1391a87613356b1b45716d' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/fad9bcd4d754cc689c19dc04d2c44b82c1a5d6c8' label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67 - url: 'https://git.kernel.org/stable/c/1cbaf4c793b0808532f4e7b40bc4be7cec2c78f2' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://git.kernel.org/stable/c/3d48e5be107429ff5d824e7f2a00d1b610d36fbc' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://git.kernel.org/stable/c/8d14a4d0afb49a5b8535d414c782bb334860e73e' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://git.kernel.org/stable/c/c2a30c81bf3cb9033fa9f5305baf7c377075e2e5' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://git.kernel.org/stable/c/cd5c2d0b09d5b6d3f0a7bbabe6761a4997e9dee9' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://git.kernel.org/stable/c/d351bcadab6caa6d8ce7159ff4b77e2da35c09fa' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://git.kernel.org/stable/c/e18afcb7b2a12b635ac10081f943fcf84ddacc51' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://git.kernel.org/stable/c/ea96bf3f80625cddba1391a87613356b1b45716d' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://git.kernel.org/stable/c/fad9bcd4d754cc689c19dc04d2c44b82c1a5d6c8' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html' label: af854a3a-2127-422b-91ae-364da2661108 - url: 'https://cert-portal.siemens.com/productcert/html/ssa-265688.html' label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e tags: - nvd - cve.org epss: 0.00254 epssPercentile: 0.16896 ingestedAt: '2026-10-15T03:30:12.658Z' ssvc: exploitation: none automatable: 'no' technicalImpact: partial timestamp: '2025-02-06T16:56:24.973748Z' --- ## Overview In the Linux kernel, the following vulnerability has been resolved: ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() After unregistering the CPU idle device, the memory associated with it is not freed, leading to a memory leak: unreferenced object 0xffff896282f6c000 (size 1024): comm "swapper/0", pid 1, jiffies 4294893170 hex dump (first 32 bytes): 00 00 00 00 0b 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 8836a742): [] kmalloc_trace+0x29d/0x340 [] acpi_processor_power_init+0xf3/0x1c0 [] __acpi_processor_start+0xd3/0xf0 [] acpi_processor_start+0x2c/0x50 [] really_probe+0xe2/0x480 [] __driver_probe_device+0x78/0x160 [] driver_probe_device+0x1f/0x90 [] __driver_attach+0xce/0x1c0 [] bus_for_each_dev+0x70/0xc0 [] bus_add_driver+0x112/0x210 [] driver_register+0x55/0x100 [] acpi_processor_driver_init+0x3b/0xc0 [] do_one_initcall+0x41/0x300 [] kernel_init_freeable+0x320/0x470 [] kernel_init+0x16/0x1b0 [] ret_from_fork+0x2d/0x50 Fix this by freeing the CPU idle device after unregistering it. ## Affected - `linux_kernel >= 3.7, < 4.19.311` - `linux_kernel >= 4.20, < 5.4.273` - `linux_kernel >= 5.5, < 5.10.214` - `linux_kernel >= 5.11, < 5.15.153` - `linux_kernel >= 5.16, < 6.1.83` - `linux_kernel >= 6.2, < 6.6.23` - `linux_kernel >= 6.7, < 6.7.11` - `linux_kernel >= 6.8, < 6.8.2` - `debian_linux = 10.0` ## Remediation Upgrade past the affected range: - `linux_kernel 6.8.2`