---
id: CVE-2026-23087
title: 'scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()

  Memory allocated for struct vscsiblk_info in scsiback_probe() is not
  freed in scsiback_remove() lea…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 <
    a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9
  - >-
    Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 <
    427b0fb30ddec3bad05dcd73b00718f98c7026d2
  - >-
    Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 <
    4a975c72429b050c234405668b742cdecc11548e
  - >-
    Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 <
    f86264ec0e2b102fcd49bf3e4f32fee669d482fc
  - >-
    Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 <
    32e52b56056daf0f0881fd9254706acf25b4be97
  - >-
    Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 <
    24c441f0e24da175d7912095663f526ac480dc4f
  - >-
    Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 <
    901a5f309daba412e2a30364d7ec1492fa11c32c
  - Linux 3.18
published: '2026-02-04'
updated: '2026-09-08'
sourceUpdated: '2026-09-08T08:44:50.854Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23087'
references:
  - url: 'https://git.kernel.org/stable/c/a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9'
  - url: 'https://git.kernel.org/stable/c/427b0fb30ddec3bad05dcd73b00718f98c7026d2'
  - url: 'https://git.kernel.org/stable/c/4a975c72429b050c234405668b742cdecc11548e'
  - url: 'https://git.kernel.org/stable/c/f86264ec0e2b102fcd49bf3e4f32fee669d482fc'
  - url: 'https://git.kernel.org/stable/c/32e52b56056daf0f0881fd9254706acf25b4be97'
  - url: 'https://git.kernel.org/stable/c/24c441f0e24da175d7912095663f526ac480dc4f'
  - url: 'https://git.kernel.org/stable/c/901a5f309daba412e2a30364d7ec1492fa11c32c'
tags:
  - cve.org
epss: 0.0013
epssPercentile: 0.0215
ingestedAt: '2026-09-08T15:33:26.994Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()

Memory allocated for struct vscsiblk_info in scsiback_probe() is not
freed in scsiback_remove() leading to potential memory leaks on remove,
as well as in the scsiback_probe() error paths. Fix that by freeing it
in scsiback_remove().

## Affected

- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < a8bb3ec8d85951a56af0a72d93ccbc2aee42eef9`
- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 427b0fb30ddec3bad05dcd73b00718f98c7026d2`
- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 4a975c72429b050c234405668b742cdecc11548e`
- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < f86264ec0e2b102fcd49bf3e4f32fee669d482fc`
- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 32e52b56056daf0f0881fd9254706acf25b4be97`
- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 24c441f0e24da175d7912095663f526ac480dc4f`
- `Linux >= d9d660f6e562a47b4065eeb7e538910b0471b988 < 901a5f309daba412e2a30364d7ec1492fa11c32c`
- `Linux 3.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.