VULNERABILITY INTELLIGENCE

CVE-2026-23087

CVSS score5.5 MEDIUM
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-02-04
Last modified2026-10-15
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Memory allocated for struct vscsiblk_info in scsiback_probe() is not freed in scsiback_remove() leading to potential memory leaks on remove, as well as in the scsiback_probe() error paths. Fix that by freeing it in scsiback_remove().

Weakness classification

  • nvd@nist.gov: CWE-401

Primary references