Live › vulnerability › CVE-2026-99023
Go to dashboardThe Linux kernel's PCIe M.2 power sequencing driver allocates a regulator consumers array and never frees it, causing a memory leak. The fix adds an explicit kfree() for that array; the sources describe no code execution or data exposure.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()
of_regulator_bulk_get_all() allocates the consumers array and hands it to the caller, who is expected to free it at an appropriate time. pwrseq-pcie-m2.c never did, leading to a memory leak.
Add an explicit kfree() for the consumers array.
This page as .md · .json · in your agent: get_signal("CVE-2026-99023")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.