CVE-2026-23023

A flaw was found in the Linux kernel's idpf driver. This memory leak occurs because the idpf_vport_rel() function fails to free allocated memory during a reset operation. A local attacker could exploit this vulnerability to exhaust system memory, leading to a denial of service (DoS).

A memory leak in the Intel idpf driver can occur because vport rx_ptype_lkup is not freed when a vport is released during reset. Over repeated resets this can accumulate and increase kernel memory usage until resources are exhausted and the system becomes unstable. For the CVSS the PR is typically H because controlling driver load reset and recovery operations is usually limited to administrators. The issue is not directly network reachable and it is triggered through local device management and reset behavior. Impact is denial of service via resource exhaustion rather than information disclosure or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.