Security Advisory

CVE-2026-23337

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-25 10:27:26
Last updated 2026-05-11 22:04:53
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf_generic_parse_dt_config(), if parse_dt_cfg() fails, it returns directly. This bypasses the cleanup logic and results in a memory leak of the cfg buffer. Fix this by jumping to the out label on failure, ensuring kfree(cfg) is called before returning.