{"id":"CVE-2026-23164","title":"rocker: fix memory leak in rocker_world_port_post_fini()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nrocker: fix memory leak in rocker_world_port_post_fini()\n\nIn rocker_world_port_pre_init(), rocker_port->wpriv is allocated with\nkzalloc(wops->port_priv_size, GFP_KERNEL…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < 2a3a64d75d2d0727da285749476761ebcad557a3","Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < b11e6f926480ab0939fec44781f28558c54be4e7","Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < 8ce2e85889939c02740b4245301aa5c35fc94887","Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < d448bf96889f1905e740c554780f5c9fa0440566","Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < d8723917efda3b4f4c3de78d1ec1e1af015c0be1","Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < dce375f4afc348c310d171abcde7ec1499a4c26a","Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < 8d7ba71e46216b8657a82ca2ec118bc93812a4d0","Linux 4.6"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-06-10T20:41:35.705081Z"},"published":"2026-02-14","updated":"2026-10-19","sourceUpdated":"2026-10-19T18:25:33.850Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23164","references":[{"url":"https://git.kernel.org/stable/c/2a3a64d75d2d0727da285749476761ebcad557a3"},{"url":"https://git.kernel.org/stable/c/b11e6f926480ab0939fec44781f28558c54be4e7"},{"url":"https://git.kernel.org/stable/c/8ce2e85889939c02740b4245301aa5c35fc94887"},{"url":"https://git.kernel.org/stable/c/d448bf96889f1905e740c554780f5c9fa0440566"},{"url":"https://git.kernel.org/stable/c/d8723917efda3b4f4c3de78d1ec1e1af015c0be1"},{"url":"https://git.kernel.org/stable/c/dce375f4afc348c310d171abcde7ec1499a4c26a"},{"url":"https://git.kernel.org/stable/c/8d7ba71e46216b8657a82ca2ec118bc93812a4d0"}],"tags":["cve.org"],"epss":0.00134,"epssPercentile":0.02603,"ingestedAt":"2026-10-19T18:35:50.098Z","slug":"CVE-2026-23164","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nrocker: fix memory leak in rocker_world_port_post_fini()\n\nIn rocker_world_port_pre_init(), rocker_port->wpriv is allocated with\nkzalloc(wops->port_priv_size, GFP_KERNEL). However, in\nrocker_world_port_post_fini(), the memory is only freed when\nwops->port_post_fini callback is set:\n\n    if (!wops->port_post_fini)\n        return;\n    wops->port_post_fini(rocker_port);\n    kfree(rocker_port->wpriv);\n\nSince rocker_ofdpa_ops does not implement port_post_fini callback\n(it is NULL), the wpriv memory allocated for each port is never freed\nwhen ports are removed. This leads to a memory leak of\nsizeof(struct ofdpa_port) bytes per port on every device removal.\n\nFix this by always calling kfree(rocker_port->wpriv) regardless of\nwhether the port_post_fini callback exists.\n\n## Affected\n\n- `Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < 2a3a64d75d2d0727da285749476761ebcad557a3`\n- `Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < b11e6f926480ab0939fec44781f28558c54be4e7`\n- `Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < 8ce2e85889939c02740b4245301aa5c35fc94887`\n- `Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < d448bf96889f1905e740c554780f5c9fa0440566`\n- `Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < d8723917efda3b4f4c3de78d1ec1e1af015c0be1`\n- `Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < dce375f4afc348c310d171abcde7ec1499a4c26a`\n- `Linux >= e420114eef4a3a5025a243b89b0dc343101e3d3c < 8d7ba71e46216b8657a82ca2ec118bc93812a4d0`\n- `Linux 4.6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}