CVE-2026-23464 PUBLISHED

soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()

Assigner: Linux
Reserved: 13.01.2026 Published: 03.04.2026 Updated: 03.04.2026

In the Linux kernel, the following vulnerability has been resolved:

soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe()

In mpfs_sys_controller_probe(), if of_get_mtd_device_by_node() fails, the function returns immediately without freeing the allocated memory for sys_controller, leading to a memory leak.

Fix this by jumping to the out_free label to ensure the memory is properly freed.

Also, consolidate the error handling for the mbox_request_channel() failure case to use the same label.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 742aa6c563d29c367edbf0ef7236a7a853ed9be4 to da4b44c42f40501db35f5d0a6243708a061490a0 (excl.)
  • affected from 742aa6c563d29c367edbf0ef7236a7a853ed9be4 to e3dd5cffba07de6574165a72851471cd42cc6d15 (excl.)
  • affected from 742aa6c563d29c367edbf0ef7236a7a853ed9be4 to 17c84fb7cf3971cc621646185d785670e9530ca1 (excl.)
  • affected from 742aa6c563d29c367edbf0ef7236a7a853ed9be4 to 5a741f8cc6fe62542f955cd8d24933a1b6589cbd (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.8 is affected
  • unaffected from 0 to 6.8 (excl.)
  • unaffected from 6.12.78 to 6.12.* (incl.)
  • unaffected from 6.18.20 to 6.18.* (incl.)
  • unaffected from 6.19.10 to 6.19.* (incl.)
  • unaffected from 7.0-rc5 to * (incl.)

References