PT-2026-6157 · Linux+2 · Linux Kernel+2

Published

2026-01-01

·

Updated

2026-06-04

·

CVE-2026-23087

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak exists within the scsiback module, specifically in the scsiback remove() function. Memory allocated for the vscsiblk info structure in the scsiback probe() function is not properly freed during device removal or in error scenarios within scsiback probe(). This can lead to a gradual consumption of system memory over time.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-23087
ECHO-A978-C6A7-B0FD
USN-8162-1
USN-8180-1
USN-8180-2
USN-8180-3
USN-8180-4
USN-8180-5
USN-8180-6
USN-8186-1
USN-8187-1
USN-8188-1
USN-8243-1
USN-8275-1
USN-8278-1
USN-8278-2
USN-8289-1
USN-8289-2
USN-8296-1
USN-8296-2
USN-8297-1
USN-8393-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu