---
id: CVE-2026-23160
title: 'octeon_ep: Fix memory leak in octep_device_setup()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  octeon_ep: Fix memory leak in octep_device_setup()

  In octep_device_setup(), if octep_ctrl_net_init() fails, the function
  returns directly without unmapping the mapped …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee <
    5058d3f8f17202e673f90af1446252322bd0850f
  - >-
    Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee <
    fdfd28e13c244d7c3345e74f339fd1b67605b694
  - >-
    Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee <
    d753f3c3f9d7a6e6dbb4d3a97b73007d71624551
  - >-
    Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee <
    8016dc5ee19a77678c264f8ba368b1e873fa705b
  - Linux 6.4
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:21:10.579791Z'
published: '2026-02-14'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:23:20.205Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23160'
references:
  - url: 'https://git.kernel.org/stable/c/5058d3f8f17202e673f90af1446252322bd0850f'
  - url: 'https://git.kernel.org/stable/c/fdfd28e13c244d7c3345e74f339fd1b67605b694'
  - url: 'https://git.kernel.org/stable/c/d753f3c3f9d7a6e6dbb4d3a97b73007d71624551'
  - url: 'https://git.kernel.org/stable/c/8016dc5ee19a77678c264f8ba368b1e873fa705b'
tags:
  - cve.org
epss: 0.00134
epssPercentile: 0.02901
ingestedAt: '2026-11-05T22:38:32.079Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

octeon_ep: Fix memory leak in octep_device_setup()

In octep_device_setup(), if octep_ctrl_net_init() fails, the function
returns directly without unmapping the mapped resources and freeing the
allocated configuration memory.

Fix this by jumping to the unsupported_dev label, which performs the
necessary cleanup. This aligns with the error handling logic of other
paths in this function.

Compile tested only. Issue found using a prototype static analysis tool
and code review.

## Affected

- `Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < 5058d3f8f17202e673f90af1446252322bd0850f`
- `Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < fdfd28e13c244d7c3345e74f339fd1b67605b694`
- `Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < d753f3c3f9d7a6e6dbb4d3a97b73007d71624551`
- `Linux >= 577f0d1b1c5f3282fa2011177b0af692a7c21aee < 8016dc5ee19a77678c264f8ba368b1e873fa705b`
- `Linux 6.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.