{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-97473", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-24T16:01:01.149Z", "datePublished": "2026-09-24T16:04:15.812Z", "dateUpdated": "2026-09-28T05:30:01.317Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-28T05:30:01.317Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()\n\nWhen topology_physical_package_id()/topology_logical_die_id() returns\na negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL)\ndirectly without freeing the rapl_package structure that was just\nallocated by kzalloc_obj(), leaking memory on every failed package\naddition.\n\nUse the existing err_free_package label so that the allocation is\nreleased on the error path."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/powercap/intel_rapl_common.c"], "versions": [{"version": "26096aed255fbac9501718174dbb24c935d8854e", "lessThan": "3e9e9337e03be946ec93f2c9d28dab242482be1b", "status": "affected", "versionType": "git"}, {"version": "26096aed255fbac9501718174dbb24c935d8854e", "lessThan": "992c60771749d8d8cbfbd06049785fff95c72df1", "status": "affected", "versionType": "git"}, {"version": "26096aed255fbac9501718174dbb24c935d8854e", "lessThan": "bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47", "status": "affected", "versionType": "git"}, {"version": "f8a7fa068be099fe3406178ab047cba7c8456203", "status": "affected", "versionType": "git"}, {"version": "f575a20bd53ea755800e79c2b7aea20e9b0b2242", "status": "affected", "versionType": "git"}, {"version": "6.10.12", "lessThan": "6.11", "status": "affected", "versionType": "semver"}, {"version": "6.11.1", "lessThan": "6.12", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/powercap/intel_rapl_common.c"], "versions": [{"version": "6.12", "status": "affected"}, {"version": "0", "lessThan": "6.12", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.53", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12", "versionEndExcluding": "6.18.53"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12", "versionEndExcluding": "7.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.10.12"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.11.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/3e9e9337e03be946ec93f2c9d28dab242482be1b"}, {"url": "https://git.kernel.org/stable/c/992c60771749d8d8cbfbd06049785fff95c72df1"}, {"url": "https://git.kernel.org/stable/c/bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47"}], "title": "powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/powercap/intel_rapl_common.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "3e9e9337e03be946ec93f2c9d28dab242482be1b", "status": "affected", "version": "26096aed255fbac9501718174dbb24c935d8854e", "versionType": "git"}, {"lessThan": "992c60771749d8d8cbfbd06049785fff95c72df1", "status": "affected", "version": "26096aed255fbac9501718174dbb24c935d8854e", "versionType": "git"}, {"lessThan": "bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47", "status": "affected", "version": "26096aed255fbac9501718174dbb24c935d8854e", "versionType": "git"}, {"status": "affected", "version": "f8a7fa068be099fe3406178ab047cba7c8456203", "versionType": "git"}, {"status": "affected", "version": "f575a20bd53ea755800e79c2b7aea20e9b0b2242", "versionType": "git"}, {"lessThan": "6.11", "status": "affected", "version": "6.10.12", "versionType": "semver"}, {"lessThan": "6.12", "status": "affected", "version": "6.11.1", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/powercap/intel_rapl_common.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.12"}, {"lessThan": "6.12", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.53", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\npowercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()\n\nWhen topology_physical_package_id()/topology_logical_die_id() returns\na negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL)\ndirectly without freeing the rapl_package structure that was just\nallocated by kzalloc_obj(), leaking memory on every failed package\naddition.\n\nUse the existing err_free_package label so that the allocation is\nreleased on the error path."}], "id": "CVE-2026-97473", "lastModified": "2026-09-28T06:16:33.170", "metrics": {}, "published": "2026-09-24T17:17:24.390", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3e9e9337e03be946ec93f2c9d28dab242482be1b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/992c60771749d8d8cbfbd06049785fff95c72df1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()", "id": "2540543", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2540543"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["In the Linux kernel, the following vulnerability has been resolved:\npowercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked()\nWhen topology_physical_package_id()/topology_logical_die_id() returns\na negative value, rapl_add_package_cpuslocked() returns ERR_PTR(-EINVAL)\ndirectly without freeing the rapl_package structure that was just\nallocated by kzalloc_obj(), leaking memory on every failed package\naddition.\nUse the existing err_free_package label so that the allocation is\nreleased on the error path.", "A flaw was found in the Linux kernel's Intel Running Average Power Limit (RAPL) power capping driver. When CPU package or die identification fails during processor initialization, the driver fails to release allocated memory on the error return path. Over time, repeated addition failures can cause kernel memory exhaustion, resulting in a Denial of Service (DoS)."], "name": "CVE-2026-97473", "public_date": "2026-09-24T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-97473\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-97473\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-97473.mbox"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,3e9e9337e03be946ec93f2c9d28dab242482be1b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,992c60771749d8d8cbfbd06049785fff95c72df1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,bfc7d93bc5e12288e5dc6bb54260f68cdf5a5c47)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.12.111)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.18.53)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.111,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.53,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-24T23:45:07.194873+00:00", "updated": "2026-10-01T17:30:10.799804+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}