PT-2026-6149 · Git+3 · Kernel+88

Published 2026-01-01 · Updated 2026-02-04 · CVE-2026-23079

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The lineinfo changed notify() function within the gpio character device driver does not free allocated resources during error handling, leading to resource leaks. This occurs on error handling paths within the function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-23079

Affected Products

Kernel

Linux

Linux-Allwinner-5.19

Linux-Aws-5.0

Linux-Aws-5.11

Linux-Aws-5.13

Linux-Aws-5.19

Linux-Aws-5.3

Linux-Aws-5.8

Linux-Aws-6.2

Linux-Aws-6.5

Linux-Azure

Linux-Azure-5.11

Linux-Azure-5.13

Linux-Azure-5.19

Linux-Azure-5.3

Linux-Azure-5.8

Linux-Azure-6.11

Linux-Azure-6.2

Linux-Azure-6.5

Linux-Azure-Edge

Linux-Azure-Fde

Linux-Azure-Fde-5.19

Linux-Azure-Fde-6.2

Linux-Gcp

Linux-Gcp-5.11

Linux-Gcp-5.13

Linux-Gcp-5.19

Linux-Gcp-5.3

Linux-Gcp-5.8

Linux-Gcp-6.11

Linux-Gcp-6.2

Linux-Gcp-6.5

Linux-Gke

Linux-Gke-4.15

Linux-Gkeop-5.15

Linux-Gke-5.4

Linux-Gkeop

Linux-Hwe

Linux-Hwe-5.11

Linux-Hwe-5.13

Linux-Hwe-5.19

Linux-Hwe-5.8

Linux-Hwe-6.11

Linux-Hwe-6.17

Linux-Hwe-6.2

Linux-Hwe-6.5

Linux-Hwe-Edge

Linux-Intel-5.13

Linux-Intel-Iot-Realtime

Linux-Lowlatency-Hwe-5.19

Linux-Lowlatency-Hwe-6.11

Linux-Lowlatency-Hwe-6.2

Linux-Lowlatency-Hwe-6.5

Linux-Nvidia-6.11

Linux-Nvidia-6.2

Linux-Nvidia-6.5

Linux-Oem

Linux-Oem-5.10

Linux-Oem-5.13

Linux-Oem-5.14

Linux-Oem-5.17

Linux-Oem-5.6

Linux-Oem-6.0

Linux-Oem-6.1

Linux-Oem-6.11

Linux-Oem-6.5

Linux-Oem-6.8

Linux-Oracle-5.0

Linux-Oracle-5.11

Linux-Oracle-5.13

Linux-Oracle-5.3

Linux-Oracle-5.8

Linux-Oracle-6.14

Linux-Oracle-6.5

Linux-Raspi-Realtime

Linux-Raspi2

Linux-Realtime

Linux-Realtime-6.14

Linux-Riscv

Linux-Riscv-5.11

Linux-Riscv-5.19

Linux-Riscv-5.8

Linux-Riscv-6.14

Linux-Riscv-6.5

Linux-Starfive-5.19

Linux-Starfive-6.2

Linux-Starfive-6.5

Linux Kernel

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23079.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23079 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23079 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23079 · Vendor Advisory
• https://git.kernel.org/stable/c/16414341b0dd58b650b5df45c79115bc5977bb76 · Patch
• https://ubuntu.com/security/CVE-2026-23079 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23079 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23079 · Vendor Advisory
• https://git.kernel.org/stable/c/70b3c280533167749a8f740acaa8ef720f78f984 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23079 · Vendor Advisory
• https://git.kernel.org/linus/70b3c280533167749a8f740acaa8ef720f78f984 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note