Memory Leak Vulnerability in Linux Kernel SCSI Backend by Xen
CVE-2026-23087

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 4 February 2026

What is CVE-2026-23087?

A memory leak has been identified in the SCSI backend driver for the Xen hypervisor within the Linux kernel. The issue arises from memory allocated for struct vscsiblk_info during the scsiback_probe() process not being properly released in the scsiback_remove() function. This can lead to accumulation of unused memory when devices are removed, potentially affecting system performance and stability. The flaw has been mitigated in subsequent updates by ensuring that allocated memory is correctly freed under all relevant conditions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch