{"id":"CVE-2026-23087","title":"scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: xen: scsiback: Fix potential memory leak in scsiback_remove()\n\nMemory allocated for struct vscsiblk_info in scsiback_probe() is not\nfreed in scsiback_remove() lea…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9","Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 427b0fb30ddec3bad05dcd73b00718f98c7026d2","Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 4a975c72429b050c234405668b742cdecc11548e","Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < f86264ec0e2b102fcd49bf3e4f32fee669d482fc","Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 32e52b56056daf0f0881fd9254706acf25b4be97","Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 24c441f0e24da175d7912095663f526ac480dc4f","Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 901a5f309daba412e2a30364d7ec1492fa11c32c","Linux 3.18"],"published":"2026-02-04","updated":"2026-09-08","sourceUpdated":"2026-09-08T08:44:50.854Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23087","references":[{"url":"https://git.kernel.org/stable/c/a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9"},{"url":"https://git.kernel.org/stable/c/427b0fb30ddec3bad05dcd73b00718f98c7026d2"},{"url":"https://git.kernel.org/stable/c/4a975c72429b050c234405668b742cdecc11548e"},{"url":"https://git.kernel.org/stable/c/f86264ec0e2b102fcd49bf3e4f32fee669d482fc"},{"url":"https://git.kernel.org/stable/c/32e52b56056daf0f0881fd9254706acf25b4be97"},{"url":"https://git.kernel.org/stable/c/24c441f0e24da175d7912095663f526ac480dc4f"},{"url":"https://git.kernel.org/stable/c/901a5f309daba412e2a30364d7ec1492fa11c32c"}],"tags":["cve.org"],"epss":0.00127,"epssPercentile":0.02743,"ingestedAt":"2026-09-08T15:33:26.994Z","slug":"CVE-2026-23087","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: xen: scsiback: Fix potential memory leak in scsiback_remove()\n\nMemory allocated for struct vscsiblk_info in scsiback_probe() is not\nfreed in scsiback_remove() leading to potential memory leaks on remove,\nas well as in the scsiback_probe() error paths. Fix that by freeing it\nin scsiback_remove().\n\n## Affected\n\n- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9`\n- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 427b0fb30ddec3bad05dcd73b00718f98c7026d2`\n- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 4a975c72429b050c234405668b742cdecc11548e`\n- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < f86264ec0e2b102fcd49bf3e4f32fee669d482fc`\n- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 32e52b56056daf0f0881fd9254706acf25b4be97`\n- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 24c441f0e24da175d7912095663f526ac480dc4f`\n- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 901a5f309daba412e2a30364d7ec1492fa11c32c`\n- `Linux 3.18`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}