---
id: CVE-2026-23260
title: 'regmap: maple: free entry on mas_store_gfp() failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  regmap: maple: free entry on mas_store_gfp() failure

  regcache_maple_write() allocates a new block ('entry') to merge
  adjacent ranges and then stores it with mas_store_…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f033c26de5a5734625d2dd1dc196745fae186f1b <
    d61171cf097156030142643942c217759a9cc806
  - >-
    Linux >= f033c26de5a5734625d2dd1dc196745fae186f1b <
    811b45e2d795d955bb7fd9c816b40036f4fde350
  - >-
    Linux >= f033c26de5a5734625d2dd1dc196745fae186f1b <
    f08f2d2907675926ac5657b25f86d921f269602a
  - >-
    Linux >= f033c26de5a5734625d2dd1dc196745fae186f1b <
    f3f380ce6b3d5c9805c7e0b3d5bc28d9ec41e2e8
  - Linux 6.4
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:24:17.109450Z'
published: '2026-03-18'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:33:34.221Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23260'
references:
  - url: 'https://git.kernel.org/stable/c/d61171cf097156030142643942c217759a9cc806'
  - url: 'https://git.kernel.org/stable/c/811b45e2d795d955bb7fd9c816b40036f4fde350'
  - url: 'https://git.kernel.org/stable/c/f08f2d2907675926ac5657b25f86d921f269602a'
  - url: 'https://git.kernel.org/stable/c/f3f380ce6b3d5c9805c7e0b3d5bc28d9ec41e2e8'
tags:
  - cve.org
epss: 0.00121
epssPercentile: 0.01913
ingestedAt: '2026-11-05T22:38:32.105Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

regmap: maple: free entry on mas_store_gfp() failure

regcache_maple_write() allocates a new block ('entry') to merge
adjacent ranges and then stores it with mas_store_gfp().
When mas_store_gfp() fails, the new 'entry' remains allocated and
is never freed, leaking memory.

Free 'entry' on the failure path; on success continue freeing the
replaced neighbor blocks ('lower', 'upper').

## Affected

- `Linux >= f033c26de5a5734625d2dd1dc196745fae186f1b < d61171cf097156030142643942c217759a9cc806`
- `Linux >= f033c26de5a5734625d2dd1dc196745fae186f1b < 811b45e2d795d955bb7fd9c816b40036f4fde350`
- `Linux >= f033c26de5a5734625d2dd1dc196745fae186f1b < f08f2d2907675926ac5657b25f86d921f269602a`
- `Linux >= f033c26de5a5734625d2dd1dc196745fae186f1b < f3f380ce6b3d5c9805c7e0b3d5bc28d9ec41e2e8`
- `Linux 6.4`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.