All vulnerabilities
CVE-2026-97473

Linux: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in3e9e9337e03be946ec93f2c9d28dab242482be1bAlso 992c60771749d8d8cbfbd06049785fff95c72df1, 6.11 and 1 moreCVE List
Published24 Sep 2026Updated 28 Sep 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()

When topology_physical_package_id()/topology_logical_die_id() returns a negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL) directly without freeing the rapl_package structure that was just allocated by kzalloc_obj(), leaking memory on every failed package addition.

Use the existing err_free_package label so that the allocation is released on the error path.

Text from CVE List

Affected versions 12

  • Linuxaffected: 26096aed255fbac9501718174dbb24c935d8854e before 3e9e9337e03be946ec93f2c9d28dab242482be1bCVE List
  • Linuxaffected: 26096aed255fbac9501718174dbb24c935d8854e before 992c60771749d8d8cbfbd06049785fff95c72df1CVE List
  • Linuxaffected: 26096aed255fbac9501718174dbb24c935d8854e before bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47CVE List
  • Linuxaffected: f8a7fa068be099fe3406178ab047cba7c8456203CVE List
  • Linuxaffected: f575a20bd53ea755800e79c2b7aea20e9b0b2242CVE List
  • Linuxaffected: 6.10.12 before 6.11CVE List
  • Linuxaffected: 6.11.1 before 6.12CVE List
  • Linuxaffected: 6.12CVE List
  • Linuxunaffected: all versions before 6.12CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 3