Linux Distros Unpatched Vulnerability : CVE-2026-72140

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: Fix use-after-free in mlxbfi2cinitresource If devmplatformgetandioremapresource...

CVE-2026-72140

CVE-2026-72140 relates to the Linux kernel, specifically the i2c mlxbf subsystem. The vulnerability arises in mlxbf_i2c_init_resource() when devm_platform_get_and_ioremap_resource() returns an error: tmp_res is freed before tmp_res->io is read to obtain the error code, causing a use-after-free...