In the Linux kernel, the following vulnerability has been resolved: power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all()… (CVE-2026-99023)

The Linux kernel contained a memory leak in the power sequencing driver for pcie-m2 devices. Specifically, the function of_regulator_bulk_get_all() allocates a consumers array and expects the caller to free it. The pwrseq-pcie-m2.c code failed to free this array, leading to a memory leak. This issue was resolved by adding an explicit kfree() call to free the consumers array properly.

The vulnerability causes a memory leak in the kernel, which could lead to increased memory usage over time and potential system instability or resource exhaustion if triggered repeatedly. There is no indication of direct code execution or privilege escalation from this issue.

An official fix has been applied to the Linux kernel to add the missing kfree() call and prevent the memory leak. Users should update to the fixed kernel version once available. No additional mitigation is required beyond applying the patch.