EUVD-2026-59122

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leaks memory when arena discovery fail...

CVE-2026-72224

The CVE concerns the Linux kernel nvdimm/btt code path: arenas allocated by discover_arenas() or create_arenas() are not freed on certain error paths in btt_init(), causing a memory leak during BTT initialization failure. The practical impact is leaked memory during failed BTT initialization. The...

CVE-2026-72223

The CVE-2026-72223 entry concerns the Linux kernel, specifically the nvdimm/btt component. The vulnerability stems from memory allocated by btt_freelist_init(), btt_rtt_init(), and btt_maplocks_init() not being freed on certain discover_arenas() error paths, causing a memory leak when arena disco...

CVE-2026-72224 nvdimm/btt: Free arenas on btt_init() error paths

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on bttinit error paths The arenas allocated by discoverarenas or createarenas are not freed on some error paths in bttinit. This leaks memory when BTT initialization fails. Call freearenas from the affecte...

CVE-2026-72223 nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leaks memory when arena discovery fail...

CVE-2026-72224 nvdimm/btt: Free arenas on btt_init() error paths

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on bttinit error paths The arenas allocated by discoverarenas or createarenas are not freed on some error paths in bttinit. This leaks memory when BTT initialization fails. Call freearenas from the affecte...

CVE-2026-72223 nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leaks memory when arena discovery fail...

CVE-2026-72216

In the Linux kernel, CVE-2026-72216 affects the remoteproc/qcom path, where a leak occurs when adding custom dump_segments fails. The fix frees the allocated minidump_region 'name' if the region is not added to dump_segments, preventing a leak; it also ensures an error is returned when adding to ...

EUVD-2026-58974

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: Fix leak when custom dumpsegments addition fails Free allocated minidumpregion 'name' in qcomaddminidumpsegments when failing before adding the region to 'dumpsegments'. Otherwise, the 'name' is not tracked and ...

EUVD-2026-58970

In the Linux kernel, the following vulnerability has been resolved: mm/memoryhotplug: fix incorrect altmap passing in error path In createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemmap pages are allocated from params.altmap. If creatememoryblockdevice...

CVE-2026-72212 mm/memory_hotplug: fix incorrect altmap passing in error path

In the Linux kernel, the following vulnerability has been resolved: mm/memoryhotplug: fix incorrect altmap passing in error path In createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemmap pages are allocated from params.altmap. If creatememoryblockdevice...

CVE-2026-72212 mm/memory_hotplug: fix incorrect altmap passing in error path

In the Linux kernel, the following vulnerability has been resolved: mm/memoryhotplug: fix incorrect altmap passing in error path In createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemmap pages are allocated from params.altmap. If creatememoryblockdevice...

CVE-2026-72185 ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARNON for resident attribute in ntfsmaprunlistnolock When ntfsmaprunlistnolock needs to look up the attribute extent containing a target VCN ctxneedsreset == true, it calls ntfsattrlookup and then expects the result to...

CVE-2026-72185

The CVE-2026-72185 entries describe a Linux kernel NTFS vulnerability in ntfs_map_runlist_nolock() where a crafted NTFS image could place a resident attribute where a non-resident attribute is expected. The underlying bug was a mismatch between expected attribute type and actual data, previously ...

EUVD-2026-58943

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix WARNON for resident attribute in ntfsmaprunlistnolock When ntfsmaprunlistnolock needs to look up the attribute extent containing a target VCN ctxneedsreset == true, it calls ntfsattrlookup and then expects the result to...

EUVD-2026-58942

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfsnonresidentattrinsertrange allocates holerl before mapping the whole runlist. If ntfsattrmapwholerunlist fails, the error path drops ni-runlist.lock and returns...

CVE-2026-72184 ntfs: fix hole runlist memory leak in insert range error path

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfsnonresidentattrinsertrange allocates holerl before mapping the whole runlist. If ntfsattrmapwholerunlist fails, the error path drops ni-runlist.lock and returns...

CVE-2026-72184 ntfs: fix hole runlist memory leak in insert range error path

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfsnonresidentattrinsertrange allocates holerl before mapping the whole runlist. If ntfsattrmapwholerunlist fails, the error path drops ni-runlist.lock and returns...

CVE-2026-72184

The CVE-2026-72184 issue in the Linux kernel NTFS code leaks memory: ntfs_non_resident_attr_insert_range() allocates hole_rl, and on failure of ntfs_attr_map_whole_runlist() the error path drops ni->runlist.lock and returns without freeing hole_rl, leaking sizeof(*hole_rl) * 2 bytes. The fix f...

EUVD-2026-58935

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in accesspatternadddirs Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in error paths". Error paths of damonsysfsaccesspatternadddirs and damonsysfsschemeadddirs...