Strix
74.8K

CVE-2026-97473

UnknownEPSS 0.17%

Last modified

CVE-2026-97473 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() When topology_physical_package_id()/topology_logical_die_id() returns a negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL) directly without freeing the rapl_package structure that was just allocated by kzalloc_obj(), leaking memory on every failed package addition. Use the existing err_free_package label so that the allocation is released on the error path.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() When topology_physical_package_id()/topology_logical_die_id() returns a negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL) directly without freeing the rapl_package structure that was just allocated by kzalloc_obj(), leaking memory on every failed package addition. Use the existing err_free_package label so that the allocation is released on the error path.

Metrics

EPSS Probability
0.17%

5.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 26096aed255fbac9501718174dbb24c935d8854e, < 3e9e9337e03be946ec93f2c9d28dab242482be1b; >= 26096aed255fbac9501718174dbb24c935d8854e, < 992c60771749d8d8cbfbd06049785fff95c72df1; >= 26096aed255fbac9501718174dbb24c935d8854e, < bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47; f8a7fa068be099fe3406178ab047cba7c8456203; f575a20bd53ea755800e79c2b7aea20e9b0b2242; >= 6.10.12, < 6.11; >= 6.11.1, < 6.12
LinuxLinux6.12

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-97473?
In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() When topology_physical_package_id()/topology_logical_die_id() returns a negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL) directly without freeing the rapl_package structure that was just allocated by kzalloc_obj(), leaking memory on every failed package addition. Use the existing err_free_package label so that the allocation is released on the error path.
How severe is CVE-2026-97473?
Severity scoring for CVE-2026-97473 is pending analysis. The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2026-97473?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-97473?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST