---
id: CVE-2026-99023
title: 'power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()

  of_regulator_bulk_get_all() allocates the consumers array and hands it to
  the caller, wh…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60 <
    5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff
  - >-
    Linux >= 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60 <
    0d6c5794fd633427f0d4ad8b51d94061295649da
  - Linux 7.0
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T12:21:06.818Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-99023'
references:
  - url: 'https://git.kernel.org/stable/c/5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff'
  - url: 'https://git.kernel.org/stable/c/0d6c5794fd633427f0d4ad8b51d94061295649da'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.534Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()

of_regulator_bulk_get_all() allocates the consumers array and hands it to
the caller, who is expected to free it at an appropriate time.
pwrseq-pcie-m2.c never did, leading to a memory leak.

Add an explicit kfree() for the consumers array.

## Affected

- `Linux >= 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60 < 5cd2354ebfbd35bcb88d01fe7d3ee08dcf266eff`
- `Linux >= 52e7b5bd62bab3851f25d8b70ad7eae9e94aba60 < 0d6c5794fd633427f0d4ad8b51d94061295649da`
- `Linux 7.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.