Not yet scoredPublished Feb 14, 2026

CVE-2026-23176platform/x86: toshiba_haps: Fix memory leaks in add/remove routines

Updated under an hour ago (Oct 27, 2026, 5:10 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_haps: Fix memory leaks in add/remove routines toshiba_haps_add() leaks the haps object allocated by it if it returns an error after allocating that object successfully. toshiba_haps_remove() does not free the object pointed to by toshiba_haps before clearing that pointer, so it becomes unreachable allocated memory. Address these memory leaks by using devm_kzalloc() for allocating the memory in question.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	23d0ba0c908ac10139f0351023c64198d7fc1409 builds before 17f37c4cdf42a9e4915216b9e130fc8baef4cc64; 23d0ba0c908ac10139f0351023c64198d7fc1409 builds before 5bce10f0f9435afaae3fc4df9a52b01d9b3853dc; from 23d0ba0c908ac10139f0351023c64198d7fc1409 before f2093e87ddec13e7a920f326c078a5f765ba89c3; from 23d0ba0c908ac10139f0351023c64198d7fc1409 before ca9ff71c15bc8e48529c2033294a519a7749b272; from 23d0ba0c908ac10139f0351023c64198d7fc1409 before bf0474356875d005d420f8c6b9ac168566e72e87; from 23d0ba0c908ac10139f0351023c64198d7fc1409 before f93ae43780b759a70734be9bc82c1adcf7f33208; from 23d0ba0c908ac10139f0351023c64198d7fc1409 before 128497456756e1b952bd5a912cd073836465109d	CNA record

References

References

https://git.kernel.org/stable/c/17f37c4cdf42a9e4915216b9e130fc8baef4cc64
https://git.kernel.org/stable/c/5bce10f0f9435afaae3fc4df9a52b01d9b3853dc
https://git.kernel.org/stable/c/f2093e87ddec13e7a920f326c078a5f765ba89c3
https://git.kernel.org/stable/c/ca9ff71c15bc8e48529c2033294a519a7749b272
https://git.kernel.org/stable/c/bf0474356875d005d420f8c6b9ac168566e72e87
https://git.kernel.org/stable/c/f93ae43780b759a70734be9bc82c1adcf7f33208
https://git.kernel.org/stable/c/128497456756e1b952bd5a912cd073836465109d

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.