◆ CVE Hub

CVE-2026-99023

power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()

Published
2026-10-23
Last modified
2026-10-23
CNA
Linux
NVD status
Received
CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
—
Not scored
EPSS exploit probability
0.2%
Percentile 9.0%
as of 2026-10-24
CISA KEV
—
Not listed

Description

NVD

In the Linux kernel, the following vulnerability has been resolved: power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all() of_regulator_bulk_get_all() allocates the consumers array and hands it to the caller, who is expected to free it at an appropriate time. pwrseq-pcie-m2.c never did, leading to a memory leak. Add an explicit kfree() for the consumers array.

Affected products and packages

CNA (CVE.org)

VendorProductVersions
LinuxLinux
affected: 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60 … < 5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff
affected: 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60 … < 0d6c5794fd633427f0d4ad8b51d94061295649da
default: unaffected
LinuxLinux
affected: 7.0
unaffected: 0 … < 7.0
unaffected: 7.2.11 … <= 7.2.*
unaffected: 7.3 … <= *
default: affected

Open-source packages (GitHub Advisory / OSV)

power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()

EcosystemPackageAffected versionsFixed in
>= 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60, < 5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff; < 0d6c5794fd633427f0d4ad8b51d94061295649da5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff, 0d6c5794fd633427f0d4ad8b51d94061295649da
LinuxKernel>= 7.0.0, < 7.2.117.2.11

Linux distribution status

Red Hat ↗

No record

Debian ↗

ReleasePackageStatusFixed version / notes
bookwormlinuxnot-affected unimportant
forkylinuxresolved not yet assigned7.2.11-1
sidlinuxresolved not yet assigned7.2.11-1
trixielinuxnot-affected unimportant

Ubuntu ↗

No record

References (5)