Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpf_vc_core_deinit() Make sure to free hw->lan_regs. Reported by kmemleak during reset: unreferenced object 0xff1b913d02a936c0 (size 96): comm "kworker/u258:14", pid 2174, jiffies 4294958305 hex dump (first 32 bytes): 00 00 00 c0 a8 ba 2d ff 00 00 00 00 00 00 00 00 ......-......... 00 00 40 08 00 00 00 00 00 00 25 b3 a8 ba 2d ff ..@.......%...-. backtrace (crc 36063c4f): __kmalloc_noprof+0x48f/0x890 idpf_vc_core_init+0x6ce/0x9b0 [idpf] idpf_vc_event_task+0x1fb/0x350 [idpf] process_one_work+0x226/0x6d0 worker_thread+0x19e/0x340 kthread+0x10f/0x250 ret_from_fork+0x251/0x2b0 ret_from_fork_asm+0x1a/0x30
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-01-31 | 2 | Patch2 |
| 2026-03-10 | 1 | Patch1 |
Linux admins: CVE-2026-23022 in the idpf driver caused memory leaks during reset, impacting performance and stability. Kernel patch is out—check kmemleak and dmesg. https://bitninja.com/blog/server-security-alert-new-linux-kernel-vulnerability/
Post summary
A kernel patch for CVE-2026-23022 is available; the vulnerability causes memory leaks in the idpf driver and can be verified using kmemleak and dmesg.
CVE-2026-23022 In the Linux kernel, the following vulnerability has been resolved: idpf https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-23022
Post summary
The message notes that CVE-2026‑23022 in the Linux kernel's idpf driver has been resolved, but offers no further patch details or technical context.
CVE-2026-23022 In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak in idpf_vc_core_deinit() Make sure to free hw->lan_regs. Reported by kmeml… https://www.cve.org/CVERecord?id=CVE-2026-23022
Post summary
The Linux kernel’s idpf driver had a memory‑leak (CVE‑2026‑23022) that is now fixed by ensuring hw->lan_regs are freed during deinitialization.
10 of 10 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 6.17 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |
| OS | linux | linux_kernel | 6.19 | - | - |