CVE-2026-23176

Source
https://cve.org/CVERecord?id=CVE-2026-23176
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23176.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-23176
Downstream
Published
2026-02-14T16:27:08.764Z
Modified
2026-03-09T23:58:07.197721Z
Summary
platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
Details

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: toshiba_haps: Fix memory leaks in add/remove routines

toshibahapsadd() leaks the haps object allocated by it if it returns an error after allocating that object successfully.

toshibahapsremove() does not free the object pointed to by toshiba_haps before clearing that pointer, so it becomes unreachable allocated memory.

Address these memory leaks by using devm_kzalloc() for allocating the memory in question.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23176.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
23d0ba0c908ac10139f0351023c64198d7fc1409
Fixed
17f37c4cdf42a9e4915216b9e130fc8baef4cc64
Fixed
5bce10f0f9435afaae3fc4df9a52b01d9b3853dc
Fixed
f2093e87ddec13e7a920f326c078a5f765ba89c3
Fixed
ca9ff71c15bc8e48529c2033294a519a7749b272
Fixed
bf0474356875d005d420f8c6b9ac168566e72e87
Fixed
f93ae43780b759a70734be9bc82c1adcf7f33208
Fixed
128497456756e1b952bd5a912cd073836465109d

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23176.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.17.0
Fixed
5.10.250
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.200
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.163
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.124
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.70
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.10

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-23176.json"