Linux CVE-2026-23464

The vulnerability exists in the Microchip PolarFire SoC (MPFS) system controller probe function within the Linux kernel's soc/microchip/mpfs driver. The code allocates memory for a sys_controller structure but fails to deallocate it when of_get_mtd_device_by_node() returns an error. Similarly, error handling for mbox_request_channel() failure also bypasses proper cleanup. The root cause is improper control flow in error handling paths (CWE-401: Missing Release of Memory after Effective Lifetime), where early function returns occur without executing cleanup code. The fix consolidates error handling by introducing an out_free label that ensures sys_controller memory is properly freed via kfree() before returning to the caller, regardless of which failure path is taken.