CVE-2026-23337

kernel: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config()

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · March 25, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's pinctrl subsystem, specifically within the pinconf-generic module. This vulnerability occurs when the pinconf_generic_parse_dt_config() function fails to properly deallocate memory, bypassing the intended cleanup logic. This oversight results in a memory leak, which can lead to a gradual degradation of system performance and stability over time.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-772 · Missing Release of Resource after Effective Lifetime