CVE-2026-72309

The CVE-2026-72309 vulnerability affects the Linux kernel’s tracing/remotes path. It fixes a leak in trace_remote_alloc_buffer() error path: if page allocation fails, desc->nr_cpus is not yet incremented for the current CPU, which can cause a half-allocated rb_desc to remain unreleased in trac...

EUVD-2026-59208

In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in traceremoteallocbuffer error path If page allocation fails in traceremoteallocbuffer, desc-nrcpus is not yet incremented for the current CPU. As a consequence, on error, half-allocated rbdesc will not...

CVE-2026-72309 tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path

In the Linux kernel, the following vulnerability has been resolved: tracing/remotes: Fix leak in traceremoteallocbuffer error path If page allocation fails in traceremoteallocbuffer, desc-nrcpus is not yet incremented for the current CPU. As a consequence, on error, half-allocated rbdesc will not...

CVE-2026-72308 mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()

In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxswspportlagjoin When mlxswspportlagindexget fails, mlxswspportlagjoin returns an error without releasing the lag reference obtained by the earlier mlxswsplagget. All other error paths in the functio...

CVE-2026-72307 mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()

In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxswspvrslpmtreereplace When mlxswspvrslpmtreereplace fails after replacing some VRs, the error rollback loop does not correctly revert the preceding replacements. The loop decrements the index but...

CVE-2026-72307

CVE-2026-72307 describes a Linux kernel issue in the mlxsw path where, after replacing VRs, the error rollback loop failed to update the vr pointer, causing a refcount leak of new_tree if replacements were partially completed. The root cause: the loop variable could point at the wrong VR, causing...

EUVD-2026-59206

In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxswspvrslpmtreereplace When mlxswspvrslpmtreereplace fails after replacing some VRs, the error rollback loop does not correctly revert the preceding replacements. The loop decrements the index but...

CVE-2026-72307 mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()

In the Linux kernel, the following vulnerability has been resolved: mlxsw: fix refcount leak in mlxswspvrslpmtreereplace When mlxswspvrslpmtreereplace fails after replacing some VRs, the error rollback loop does not correctly revert the preceding replacements. The loop decrements the index but...

CVE-2026-72290

CVE-2026-72290 affects the Linux kernel KVM when running on s390. The issue is a GISC (guest ISC) refcount leak that occurs because kvm_s390_gisc_register() registers the GISC before pinning guest interrupt forwarding pages and allocating the AISB bit; on error, the unwind path did not unregister...

CVE-2026-72290 KVM: s390: pci: Fix GISC refcount leak on AIF enable failure

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix GISC refcount leak on AIF enable failure kvms390giscregister registers the guest ISC before pinning the guest interrupt forwarding pages and allocating the AISB bit. If any of the later setup steps fails, the...

CVE-2026-72276 fbdev: metronomefb: fix potential memory leak in metronomefb_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in metronomefbprobe The memory allocated for pagerefs in fbdeferredioinit is not freed on the error path. Fix it by calling fbdeferrediocleanup...

EUVD-2026-59175

In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in metronomefbprobe The memory allocated for pagerefs in fbdeferredioinit is not freed on the error path. Fix it by calling fbdeferrediocleanup...

CVE-2026-72276 fbdev: metronomefb: fix potential memory leak in metronomefb_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in metronomefbprobe The memory allocated for pagerefs in fbdeferredioinit is not freed on the error path. Fix it by calling fbdeferrediocleanup...

CVE-2026-72275

The CVE concerns the Linux kernel fbdev driver for broadsheetfb. A memory leak was introduced where pagerefs allocated in fb_deferred_io_init() were not freed on error paths in broadsheetfb_probe(). The issue is fixed by invoking fb_deferred_io_cleanup() to release the allocated resources. The do...

CVE-2026-72274

The CVE-2026-72274 entry concerns the Linux kernel fbdev driver, specifically the hecubafbProbe path. A memory leak was introduced where the pagerefs allocated in fb_deferred_io_init() were not freed on the error path. The issue is resolved by calling fb_deferred_io_cleanup() to release those res...

CVE-2026-72274 fbdev: hecubafb: fix potential memory leak in hecubafb_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: fix potential memory leak in hecubafbprobe The memory allocated for pagerefs in fbdeferredioinit is not freed on the error path. Fix it by calling fbdeferrediocleanup...

CVE-2026-72275 fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: broadsheetfb: fix potential memory leak in broadsheetfbprobe The memory allocated for pagerefs in fbdeferredioinit is not freed on the error path. Fix it by calling fbdeferrediocleanup...

EUVD-2026-59173

In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: fix potential memory leak in hecubafbprobe The memory allocated for pagerefs in fbdeferredioinit is not freed on the error path. Fix it by calling fbdeferrediocleanup...

CVE-2026-72272 fbdev: radeon: fix potential memory leak in radeonfb_pci_register()

In the Linux kernel, the following vulnerability has been resolved: fbdev: radeon: fix potential memory leak in radeonfbpciregister The function radeonfbpciregister allocates memory for modelist by calling radeoncheckmodes which calls fbaddvideomode. The memory is appended to info-modelist, but i...

CVE-2026-72271 fbdev: i740fb: fix potential memory leak in i740fb_probe()

In the Linux kernel, the following vulnerability has been resolved: fbdev: i740fb: fix potential memory leak in i740fbprobe In i740fbprobe, the memory allocated in fbvideomodetomodelist for modelist is not freed in the error paths. Fix that by calling fbdestroymodelist...