CVE-2026-23337: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fix memory leak in pinconf_generic_parse_dt_config() In pinconf_generic_parse_dt_config(), if parse_dt_cfg() fails, it returns directly. This bypasses the cleanup logic and results in a memory leak of the cfg buffer. Fix this by jumping to the out label on failure, ensuring kfree(cfg) is called before returning.

Affected products

• Linux Linux Kernel: from 6.19.1, before 6.19.7 (fixed in 6.19.7); version 6.19 only; version 7.0 only

Published 2026-03-25. Last modified 2026-06-17.