Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-23087

scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.249, 5.15.199, 6.1.162, 6.6.122, 6.12.68, and 1 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Memory allocated for struct vscsiblk_info in scsiback_probe() is not freed in scsiback_remove() leading to potential memory leaks on remove, as well as in the scsiback_probe() error paths. Fix that by freeing it in scsiback_remove().

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From d9d660f6e562a47b4065eeb7e538910b0471b988 · fixed in a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9; From d9d660f6e562a47b4065eeb7e538910b0471b988 · fixed in 427b0fb30ddec3bad05dcd73b00718f98c7026d2; From d9d660f6e562a47b4065eeb7e538910b0471b988 · fixed in 4a975c72429b050c234405668b742cdecc11548e; From d9d660f6e562a47b4065eeb7e538910b0471b988 · fixed in f86264ec0e2b102fcd49bf3e4f32fee669d482fc; From d9d660f6e562a47b4065eeb7e538910b0471b988 · fixed in 32e52b56056daf0f0881fd9254706acf25b4be97; From d9d660f6e562a47b4065eeb7e538910b0471b988 · fixed in 24c441f0e24da175d7912095663f526ac480dc4f; From d9d660f6e562a47b4065eeb7e538910b0471b988 · fixed in 901a5f309daba412e2a30364d7ec1492fa11c32c

  • Linux Linux

    3.18

  • KernelLinux

    From 3.18.0 · fixed in 5.10.249; From 5.11.0 · fixed in 5.15.199; From 5.16.0 · fixed in 6.1.162; From 6.2.0 · fixed in 6.6.122; From 6.7.0 · fixed in 6.12.68; From 6.13.0 · fixed in 6.18.8

References 7

git.kernel.org