---
id: CVE-2026-23176
title: 'platform/x86: toshiba_haps: Fix memory leaks in add/remove routines'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  platform/x86: toshiba_haps: Fix memory leaks in add/remove routines

  toshiba_haps_add() leaks the haps object allocated by it if it returns
  an error after allocating th…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 <
    17f37c4cdf42a9e4915216b9e130fc8baef4cc64
  - >-
    Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 <
    5bce10f0f9435afaae3fc4df9a52b01d9b3853dc
  - >-
    Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 <
    f2093e87ddec13e7a920f326c078a5f765ba89c3
  - >-
    Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 <
    ca9ff71c15bc8e48529c2033294a519a7749b272
  - >-
    Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 <
    bf0474356875d005d420f8c6b9ac168566e72e87
  - >-
    Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 <
    f93ae43780b759a70734be9bc82c1adcf7f33208
  - >-
    Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 <
    128497456756e1b952bd5a912cd073836465109d
  - Linux 3.17
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:21:32.986457Z'
published: '2026-02-14'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:23:20.885Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23176'
references:
  - url: 'https://git.kernel.org/stable/c/17f37c4cdf42a9e4915216b9e130fc8baef4cc64'
  - url: 'https://git.kernel.org/stable/c/5bce10f0f9435afaae3fc4df9a52b01d9b3853dc'
  - url: 'https://git.kernel.org/stable/c/f2093e87ddec13e7a920f326c078a5f765ba89c3'
  - url: 'https://git.kernel.org/stable/c/ca9ff71c15bc8e48529c2033294a519a7749b272'
  - url: 'https://git.kernel.org/stable/c/bf0474356875d005d420f8c6b9ac168566e72e87'
  - url: 'https://git.kernel.org/stable/c/f93ae43780b759a70734be9bc82c1adcf7f33208'
  - url: 'https://git.kernel.org/stable/c/128497456756e1b952bd5a912cd073836465109d'
tags:
  - cve.org
epss: 0.00202
epssPercentile: 0.10212
ingestedAt: '2026-11-05T22:38:32.081Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: toshiba_haps: Fix memory leaks in add/remove routines

toshiba_haps_add() leaks the haps object allocated by it if it returns
an error after allocating that object successfully.

toshiba_haps_remove() does not free the object pointed to by
toshiba_haps before clearing that pointer, so it becomes unreachable
allocated memory.

Address these memory leaks by using devm_kzalloc() for allocating
the memory in question.

## Affected

- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < 17f37c4cdf42a9e4915216b9e130fc8baef4cc64`
- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < 5bce10f0f9435afaae3fc4df9a52b01d9b3853dc`
- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < f2093e87ddec13e7a920f326c078a5f765ba89c3`
- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < ca9ff71c15bc8e48529c2033294a519a7749b272`
- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < bf0474356875d005d420f8c6b9ac168566e72e87`
- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < f93ae43780b759a70734be9bc82c1adcf7f33208`
- `Linux >= 23d0ba0c908ac10139f0351023c64198d7fc1409 < 128497456756e1b952bd5a912cd073836465109d`
- `Linux 3.17`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.