Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-23021

In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: fix memory leak in update_eth_regs_async() When asynchronously writing to the device registers and if usb_submit_urb() fail, the code fail to release allocated to this point resources.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:5ec6bf213e9a6e2bec466e1fa4d3d2d717ce9f4968cf6dc15121e0ad8c691756
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/usb/pegasus.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5397ea6d21c35a17707e201a60761bdee00bcc4e","status":"affected","version":"323b34963d113efb566635f43858f40cce01d5f9","versionType":"git"},{"lessThan":"a40af9a2904a1ab8ce61866ebe2a894ef30754ba","status":"affected","version":"323b34963d113efb566635f43858f40cce01d5f9","versionType":"git"},{"lessThan":"ac5d92d2826dec51e5d4c6854865bc5817277452","status":"affected","version":"323b34963d113efb5666…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/usb/pegasus.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.10"},{"lessThan":"3.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.161","versionType":"semver"},{"les…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/usb/pegasus.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"5397ea6d21c35a17707e201a60761bdee00bcc4e","status":"affected","version":"323b34963d113efb566635f43858f40cce01d5f9","versionType":"git"},{"lessThan":"a40af9a2904a1ab8ce61866ebe2a894ef30754ba","status":"affected","version":"323b34963d113efb566635f43858f40cce01d5f9","versionType":"git"},{"lessThan":"ac5d92d2826dec51e5d4c6854865bc5817277452","status":"affected","version":"323b34963d113efb5666…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/usb/pegasus.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.10"},{"lessThan":"3.10","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.161","versionType":"semver"},{"les…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/471dfb97599eec74e0476046b3ef8e7037f27b34"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/5397ea6d21c35a17707e201a60761bdee00bcc4e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/93f18eaa190374e0f2d253e3b1a65cee19a7abe6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/a40af9a2904a1ab8ce61866ebe2a894ef30754ba"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/ac5d92d2826dec51e5d4c6854865bc5817277452"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/afa27621a28af317523e0836dad430bec551eb54"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ce6eef731aba23a988decea1df3b08cf978f7b01"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:06c127ee4da54b1d432336ca889d0d8e4c1f86649ed90ae923e19c833a1c7a46 · sha256:32ea42d03d0cc84e… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer