PT-2026-8159 · Linux+2 · Linux Kernel+2

Published

2026-01-01

·

Updated

2026-05-22

·

CVE-2026-23164

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A memory leak exists in the rocker module within the Linux kernel, specifically within the rocker world port post fini() function. When ports are removed, memory allocated for rocker port->wpriv is not always freed, leading to a leak of sizeof(struct ofdpa port) bytes per port on each device removal. This occurs because the port post fini callback is NULL for certain configurations, preventing the memory from being released. The issue is resolved by ensuring that kfree(rocker port->wpriv) is always called, regardless of the presence of the port post fini callback.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2026-23164
USN-8162-1
USN-8180-1
USN-8180-2
USN-8180-3
USN-8180-4
USN-8180-5
USN-8180-6
USN-8186-1
USN-8187-1
USN-8188-1
USN-8243-1
USN-8275-1
USN-8278-1
USN-8289-1
USN-8296-1
USN-8297-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu