CVE-2026-23024

linux: In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak of flow steer list on rmmo...

CVE-2026-23024 is fixed in 14 products on 1 platform, first by DEBIAN-CVE-2026-23024, released January 31, 2026. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0016
4th percentile

In the Linux kernel, the following vulnerability has been resolved: idpf: fix memory leak of flow steer list on rmmod The flow steering list maintains entries that are added and removed as ethtool creates and deletes flow steering rules. Module removal with active entries causes memory leak as the list is not properly cleaned up. Prevent this by iterating through the remaining entries in the list and freeing the associated memory during module removal. Add a spinlock (flow_steer_list_lock) to protect the list access from multiple threads.

Where it's fixed

ProductFixed inFixReleased
Linux
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-64kb · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-azure · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-azure · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-default · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-default · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.27.1.160000.2.8 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-default-base · sles 16.0 6.12.0-160000.27.1.160000.2.8 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-docs · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-docs · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-kvmsmall · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-obs-qa · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-rt · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-source · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-source · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-syms · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-syms · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.27.1 OPENSUSE-SU-2026:20416-1 Mar 25, 2026
kernel-zfcpdump · sles 16.0 6.12.0-160000.27.1 SUSE-SU-2026:20931-1 Mar 25, 2026
linux · Debian 14 6.18.8-1 DEBIAN-CVE-2026-23024 Jan 31, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.