CVE-2026-23037

Source
https://cve.org/CVERecord?id=CVE-2026-23037
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23037.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-23037
Downstream
Published
2026-01-31T11:42:31.689Z
Modified
2026-03-12T04:34:49.724044Z
Summary
can: etas_es58x: allow partial RX URB allocation to succeed
Details

In the Linux kernel, the following vulnerability has been resolved:

can: etas_es58x: allow partial RX URB allocation to succeed

When es58xallocrxurbs() fails to allocate the requested number of URBs but succeeds in allocating some, it returns an error code. This causes es58xopen() to return early, skipping the cleanup label 'free_urbs', which leads to the anchored URBs being leaked.

As pointed out by maintainer Vincent Mailhol, the driver is designed to handle partial URB allocation gracefully. Therefore, partial allocation should not be treated as a fatal error.

Modify es58xallocrxurbs() to return 0 if at least one URB has been allocated, restoring the intended behavior and preventing the leak in es58xopen().

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23037.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8537257874e949a59c834cecfd5a063e11b64b0b
Fixed
97250eb05e4b6afe787290e8fd97d0675116c61b
Fixed
aec888f44853584b5a7cd01249806030cf94a73d
Fixed
611e839d2d552416b498ed5593e10670f61fcd4d
Fixed
ba45e3d6b02c97dbb4578fbae7027fd66f3caa10
Fixed
6c5124a60989051799037834f0a1a4b428718157
Fixed
b1979778e98569c1e78c2c7f16bb24d76541ab00

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23037.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.13.0
Fixed
5.15.199
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.162
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.122
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.67
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.7

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23037.json"