PT-2026-5540 · Linux+2 · Linux Kernel+2
Vincent Mailhol
·
Published
2026-01-01
·
Updated
2026-06-04
·
CVE-2026-23037
CVSS v2.0
4.0
Medium
| Vector | AV:A/AC:H/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s etas es58x CAN driver where a partial allocation of RX URBs could lead to a memory leak. Specifically, the
es58x alloc rx urbs() function, when failing to allocate the requested number of URBs but succeeding in allocating some, returns an error. This premature return skips necessary cleanup, resulting in leaked URBs. The driver is designed to handle partial URB allocation without issue, so partial allocation should not be considered a fatal error. The issue occurs because the es58x open() function returns early, skipping the 'free urbs' cleanup label.Recommendations
Modify the
es58x alloc rx urbs() function to return 0 if at least one URB has been allocated, restoring the intended behavior and preventing the leak in es58x open().Exploit
Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu