« Volver al listado

CVE-2026-72240

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

mfd: sm501: Fix reference leak on failed device registration

When platform_device_register() fails in sm501_register_device(), the embedded struct device in pdev has already been initialized by device_initialize(), but the failure path only reports the error and returns without dropping the device reference for the current platform device:

This leads to a reference leak when platform_device_register() fails. Fix this by calling platform_device_put() before returning the error.

The issue was identified by a static analysis tool I developed and confirmed by manual review.

Detalles técnicos trazas, registros y código del informe original
  sm501_register_device()
    -> platform_device_register(pdev)
       -> device_initialize(&pdev->dev)
       -> setup_pdev_dma_masks(pdev)
       -> platform_device_add(pdev)

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-72240",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "b6d6454fdb66f3829af8b92ab06825b6060fdf7e",
              "lessThan": "bbb1ecaed4ed7680e63d3a0f143f03de32de5d6e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b6d6454fdb66f3829af8b92ab06825b6060fdf7e",
              "lessThan": "e2dac91380a10e9e8d5883fb73ce9d9b390a629c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b6d6454fdb66f3829af8b92ab06825b6060fdf7e",
              "lessThan": "0baf9d43a7b7b43df2900bd8656e75b725028b6e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b6d6454fdb66f3829af8b92ab06825b6060fdf7e",
              "lessThan": "a3e340d506c1036a747fb0972aebf1063f7ef30e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b6d6454fdb66f3829af8b92ab06825b6060fdf7e",
              "lessThan": "760a1029692f1d788dc11aa636a3bf432e58b240",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b6d6454fdb66f3829af8b92ab06825b6060fdf7e",
              "lessThan": "16a42c88c4667fa0bd944e438a667e059551f1f1",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b6d6454fdb66f3829af8b92ab06825b6060fdf7e",
              "lessThan": "2ff8156fd500d54c61430b6834137fd0a07047ce",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b6d6454fdb66f3829af8b92ab06825b6060fdf7e",
              "lessThan": "8c2f0b42fc252e1bf1c7746447091a468e784ca1",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/mfd/sm501.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.21"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "2.6.21",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/mfd/sm501.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-08-15T06:21:51.063",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/0baf9d43a7b7b43df2900bd8656e75b725028b6e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/16a42c88c4667fa0bd944e438a667e059551f1f1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/2ff8156fd500d54c61430b6834137fd0a07047ce",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/760a1029692f1d788dc11aa636a3bf432e58b240",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8c2f0b42fc252e1bf1c7746447091a468e784ca1",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a3e340d506c1036a747fb0972aebf1063f7ef30e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bbb1ecaed4ed7680e63d3a0f143f03de32de5d6e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e2dac91380a10e9e8d5883fb73ce9d9b390a629c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmfd: sm501: Fix reference leak on failed device registration\n\nWhen platform_device_register() fails in sm501_register_device(), the\nembedded struct device in pdev has already been initialized by\ndevice_initialize(), but the failure path only reports the error and\nreturns without dropping the device reference for the current platform\ndevice:\n\n  sm501_register_device()\n    -> platform_device_register(pdev)\n       -> device_initialize(&pdev->dev)\n       -> setup_pdev_dma_masks(pdev)\n       -> platform_device_add(pdev)\n\nThis leads to a reference leak when platform_device_register() fails.\nFix this by calling platform_device_put() before returning the error.\n\nThe issue was identified by a static analysis tool I developed and\nconfirmed by manual review."
    }
  ],
  "lastModified": "2026-08-17T06:18:25.593",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}