« Volver al listado

CVE-2026-72026

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure

imsic_early_acpi_init() allocates a firmware node before setting up the IMSIC state. If imsic_setup_state() fails, the function returns without freeing the allocated fwnode.

Free the fwnode and clear the global pointer on this error path, matching the cleanup already done when imsic_early_probe() fails.

[ tglx: Use a common cleanup path instead of copying code around ]

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-72026",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "fbe826b1c10699a70b81a441fe47b817d1019f37",
              "lessThan": "a27f17bad38c5fea3c73281517869af0089a0451",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fbe826b1c10699a70b81a441fe47b817d1019f37",
              "lessThan": "a5a367756926de1c21a013ea5ed7fc2219f4cb4f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fbe826b1c10699a70b81a441fe47b817d1019f37",
              "lessThan": "b321a046d7717225c07ba3f4b7b0a4758c2f9d58",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "fbe826b1c10699a70b81a441fe47b817d1019f37",
              "lessThan": "1358126fbed104e5657955d3ba029b283687ba02",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/irqchip/irq-riscv-imsic-early.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.12"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "6.12",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/irqchip/irq-riscv-imsic-early.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-08-15T06:21:01.730",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/1358126fbed104e5657955d3ba029b283687ba02",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a27f17bad38c5fea3c73281517869af0089a0451",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a5a367756926de1c21a013ea5ed7fc2219f4cb4f",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b321a046d7717225c07ba3f4b7b0a4758c2f9d58",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure\n\nimsic_early_acpi_init() allocates a firmware node before setting up the\nIMSIC state. If imsic_setup_state() fails, the function returns without\nfreeing the allocated fwnode.\n\nFree the fwnode and clear the global pointer on this error path, matching\nthe cleanup already done when imsic_early_probe() fails.\n\n[ tglx: Use a common cleanup path instead of copying code around ]"
    }
  ],
  "lastModified": "2026-08-17T06:18:00.330",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}