What’s Vulnerable › Vulnerabilities

CVE-2026-97473: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-24 · updated 2026-09-28

Description

In the Linux kernel, the following vulnerability has been resolved: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() When topology_physical_package_id()/topology_logical_die_id() returns a negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL) directly without freeing the rapl_package structure that was just allocated by kzalloc_obj(), leaking memory on every failed package addition. Use the existing err_free_package label so that the allocation is released on the error path.

Affected products

• Linux kernel: from 6.10.12 before 6.11; from 6.11.1 before 6.12; 6.12 — fixed in 6.11, 6.12, 7.2

How to fix

Upgrade to a fixed version: Linux kernel 6.11, 6.12, 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/3e9e9337e03be946ec93f2c9d28dab242482be1b
• https://git.kernel.org/stable/c/992c60771749d8d8cbfbd06049785fff95c72df1
• https://git.kernel.org/stable/c/bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47

Get alerted when CVE-2026-97473 or the next vulnerability affects your stack