CVE-2026-23087

MediumCVSS 5.5/10Last modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()

Memory allocated for struct vscsiblk_info in scsiback_probe() is not freed in scsiback_remove() leading to potential memory leaks on remove, as well as in the scsiback_probe() error paths. Fix that by freeing it in scsiback_remove().

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

VendorProductVersions
LinuxLinux>= d9d660f6e562a47b4065eeb7e538910b0471b988, < a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9; >= d9d660f6e562a47b4065eeb7e538910b0471b988, < 427b0fb30ddec3bad05dcd73b00718f98c7026d2; >= d9d660f6e562a47b4065eeb7e538910b0471b988, < 4a975c72429b050c234405668b742cdecc11548e; >= d9d660f6e562a47b4065eeb7e538910b0471b988, < f86264ec0e2b102fcd49bf3e4f32fee669d482fc; >= d9d660f6e562a47b4065eeb7e538910b0471b988, < 32e52b56056daf0f0881fd9254706acf25b4be97; >= d9d660f6e562a47b4065eeb7e538910b0471b988, < 24c441f0e24da175d7912095663f526ac480dc4f; >= d9d660f6e562a47b4065eeb7e538910b0471b988, < 901a5f309daba412e2a30364d7ec1492fa11c32c
LinuxLinux3.18
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.7, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.6, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.7, < *

References

Timeline

Published
Feb 4, 2026
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-230885.5In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash on synthetic stacktrace field usage When creating aCVE-2026-230897.8In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() When snd_uCVE-2026-230905.5In the Linux kernel, the following vulnerability has been resolved: slimbus: core: fix device reference leak on report present Slimbus devCVE-2026-230915.5In the Linux kernel, the following vulnerability has been resolved: intel_th: fix device leak on output open() Make sure to drop the referCVE-2026-230927.8In the Linux kernel, the following vulnerability has been resolved: iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_sCVE-2026-230935.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: smbd: fix dma_unmap_sg() nents The dma_unmap_sg() functions shoCVE-2026-230945.5In the Linux kernel, the following vulnerability has been resolved: uacce: fix isolate sysfs check condition uacce supports the device isoCVE-2026-230955.5In the Linux kernel, the following vulnerability has been resolved: gue: Fix skb memleak with inner IP protocol 0. syzbot reported skb memCVE-2026-230965.5In the Linux kernel, the following vulnerability has been resolved: uacce: fix cdev handling in the cleanup path When cdev_device_add failCVE-2026-230975.5In the Linux kernel, the following vulnerability has been resolved: migrate: correct lock ordering for hugetlb file folios Syzbot has founCVE-2026-230987.8In the Linux kernel, the following vulnerability has been resolved: netrom: fix double-free in nr_route_frame() In nr_route_frame(), old_sCVE-2026-230997.1In the Linux kernel, the following vulnerability has been resolved: bonding: limit BOND_MODE_8023AD to Ethernet devices BOND_MODE_8023AD m
CVE-2026-23087: Medium severity, CVSS 5.5 | Vulnix