CVE-2026-23164

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the rocker module within the Linux kernel, specifically within the rocker world port post fini() function. When ports are removed, memory allocated for rocker port->wpriv is not always freed, leading to a leak of sizeof(struct ofdpa port) bytes per port on each device removal. This occurs because the port post fini callback is NULL for certain configurations, preventing the memory from being released. The issue is resolved by ensuring that kfree(rocker port->wpriv) is always called, regardless of the presence of the port post fini callback.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.