CVE-2026-99023
power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()
CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
—
Not scored
EPSS exploit probability
0.2%
Percentile 9.0%
as of 2026-10-24
CISA KEV
—
Not listed
Description
NVD
In the Linux kernel, the following vulnerability has been resolved: power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all() of_regulator_bulk_get_all() allocates the consumers array and hands it to the caller, who is expected to free it at an appropriate time. pwrseq-pcie-m2.c never did, leading to a memory leak. Add an explicit kfree() for the consumers array.
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | affected: 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60 … < 5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff affected: 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60 … < 0d6c5794fd633427f0d4ad8b51d94061295649da default: unaffected |
| Linux | Linux | affected: 7.0 unaffected: 0 … < 7.0 unaffected: 7.2.11 … <= 7.2.* unaffected: 7.3 … <= * default: affected |
Open-source packages (GitHub Advisory / OSV)
CVE-2026-99023
OSV
power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()
| Ecosystem | Package | Affected versions | Fixed in |
|---|---|---|---|
| >= 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60, < 5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff; < 0d6c5794fd633427f0d4ad8b51d94061295649da | 5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff, 0d6c5794fd633427f0d4ad8b51d94061295649da | ||
| Linux | Kernel | >= 7.0.0, < 7.2.11 | 7.2.11 |
Linux distribution status
References (5)
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git OSV
- https://git.kernel.org/stable/c/0d6c5794fd633427f0d4ad8b51d94061295649da NVD, CNA, OSV
- https://git.kernel.org/stable/c/5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff NVD, CNA, OSV
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99023.json OSV
- https://nvd.nist.gov/vuln/detail/CVE-2026-99023 OSV