PT-2026-26120 · Linux · Linux

Published 2026-03-18 · Updated 2026-03-18 · CVE-2026-23260

Mitre

In the Linux kernel, the following vulnerability has been resolved:

regmap: maple: free entry on mas store gfp() failure

regcache maple write() allocates a new block ('entry') to merge adjacent ranges and then stores it with mas store gfp(). When mas store gfp() fails, the new 'entry' remains allocated and is never freed, leaking memory.

Free 'entry' on the failure path; on success continue freeing the replaced neighbor blocks ('lower', 'upper').

Related Identifiers

CVE-2026-23260

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-23260 · Security Note
• https://git.kernel.org/stable/c/811b45e2d795d955bb7fd9c816b40036f4fde350 · Note
• https://git.kernel.org/stable/c/d61171cf097156030142643942c217759a9cc806 · Note
• https://git.kernel.org/stable/c/f3f380ce6b3d5c9805c7e0b3d5bc28d9ec41e2e8 · Note
• https://git.kernel.org/stable/c/f08f2d2907675926ac5657b25f86d921f269602a · Note