CVE-2026-97473: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() When topology_physical_package_id()/topology_logical_die_id() returns a negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL) directly without freeing the rapl_package structure that was just allocated by kzalloc_obj(), leaking memory on every failed package addition. Use the existing err_free_package label so that the allocation is released on the error path.

Affected products

• Linux Linux: from 6.10.12, before 6.11 (fixed in 6.11); from 6.11.1, before 6.12 (fixed in 6.12); from 6.12, before 6.12.111 (fixed in 6.12.111); from 6.13, before 6.18.53 (fixed in 6.18.53); from 6.19, before 7.2 (fixed in 7.2)

Published 2026-09-24. Last modified 2026-09-28.