PT-2026-6160
CVE-2026-23090
·
Published
2025-11-26
·
Updated
2026-10-13
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue where Slimbus devices, allocated dynamically upon receiving report-present messages, may experience a device reference leak. This occurs because a reference is not dropped when looking up already registered devices. An additional reference is required if the device has not yet been registered and needs to be allocated.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾