CVE-2026-72171 mtd: slram: remove failed entries from the device list

🗓️ 15 Aug 2026 05:53:37Reported by LinuxType

slram in Linux kernel leaves partially initialized entries on the global list when register_device() fails, leading to use-after-free during cleanup.

Reporter	Title	Published	Views	Family All 57
CVE	CVE-2026-72171	15 Aug 202605:53	–	cve
Debian CVE	CVE-2026-72171	15 Aug 202605:53	–	debiancve
EUVD	EUVD-2026-58929	15 Aug 202605:53	–	euvd
NVD	CVE-2026-72171	15 Aug 202606:21	–	nvd
osv_bell	BELL-CVE-2026-72171	18 Aug 202606:06	–	osv_bell
osv_debian	DEBIAN-CVE-2026-72171	15 Aug 202606:21	–	osv_debian
osv_ubuntu	UBUNTU-CVE-2026-72171	15 Aug 202606:21	–	osv_ubuntu
osv_usn	USN-8875-1 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities	6 Oct 202610:11	–	osv_usn
osv_usn	USN-8875-2 linux-nvidia vulnerabilities	9 Oct 202608:38	–	osv_usn
osv_usn	USN-8876-1 linux-azure-fde vulnerabilities	6 Oct 202610:10	–	osv_usn

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/mtd/devices/slram.c"
    ],
    "versions": [
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "9ee674ab10f755bbedbcbb8e76745d2bb8de88d1",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "e97415b8254d9cc131b7bb1c80fcf38123269b9a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "f40acf577bb0fb0829f285ecfeb27d817840601c",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "200b8bc5b6065b02f3775cf131f14b8e1156a00a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "2fd0cbbb34447ccddab67a2a638a07c6d94cae7a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "d8dcbbfa0d695a5244059aa34a2e81f3e8df1082",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "bdcdfc2464659789032edfad15ff5f7a166f5d7b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "36f1648644d769c496a8e47e53603e863e358d73",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/mtd/devices/slram.c"
    ],
    "versions": [
      {
        "version": "2.6.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.12",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.261",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.212",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.178",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.145",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.97",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.40",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.5",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/d8dcbbfa0d695a5244059aa34a2e81f3e8df1082
git	www.git.kernel.org/stable/c/f40acf577bb0fb0829f285ecfeb27d817840601c
git	www.git.kernel.org/stable/c/e97415b8254d9cc131b7bb1c80fcf38123269b9a
git	www.git.kernel.org/stable/c/36f1648644d769c496a8e47e53603e863e358d73
git	www.git.kernel.org/stable/c/9ee674ab10f755bbedbcbb8e76745d2bb8de88d1
git	www.git.kernel.org/stable/c/200b8bc5b6065b02f3775cf131f14b8e1156a00a
git	www.git.kernel.org/stable/c/2fd0cbbb34447ccddab67a2a638a07c6d94cae7a
git	www.git.kernel.org/stable/c/bdcdfc2464659789032edfad15ff5f7a166f5d7b

17 Aug 2026 05:41Current

CVSS 3.17.8

EPSS0.00164