CVE-2026-72439 md/raid10: fix writes_pending leak on write request failures

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writespending leak on write request failures raid10makerequest acquires a writespending reference with mdwritestart before dispatching write requests. Several failure paths in raid10writerequest complete the bio an...

EUVD-2026-59337

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writespending and barrier reference leaks on discard failures raid10makerequest acquires a writespending reference with mdwritestart before calling raid10handlediscard. Several failure paths in raid10handlediscard...

CVE-2026-72438 md/raid10: fix writes_pending and barrier reference leaks on discard failures

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writespending and barrier reference leaks on discard failures raid10makerequest acquires a writespending reference with mdwritestart before calling raid10handlediscard. Several failure paths in raid10handlediscard...

CVE-2026-72438

CVE-2026-72438 affects the Linux kernel md/raid10 subsystem. The issue stems from reference counting leaks in writes_pending and barrier references during discard failures: raid10_make_request() acquires a writes_pending reference via md_write_start() before raid10_handle_discard(), and certain f...

CVE-2026-72438 md/raid10: fix writes_pending and barrier reference leaks on discard failures

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writespending and barrier reference leaks on discard failures raid10makerequest acquires a writespending reference with mdwritestart before calling raid10handlediscard. Several failure paths in raid10handlediscard...

CVE-2026-72386 drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced A group ref is tied to the pending tileroomwork, so we need to release it if the cancel was effective...

CVE-2026-72386

The CVE-2026-72386 affects the Linux kernel, in the DRM Panthor component. It describes a leak that occurs when a group is evicted before the tiler_oom_work is serviced; a group reference is tied to the pending tiler_oom_work and must be released if the cancel is effective. The fix ensures the gr...

CVE-2026-72321 ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()

In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential memory leaks in igmpmodtimer and igmpstoptimer When a timer is deleted and not re-armed in igmpmodtimer, or stopped in igmpstoptimer, the code currently decrements the reference counter of the multicast...

EUVD-2026-59216

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpcclnt across the TLS connectworker The TLS connect path has a use-after-free: nothing pins the upper rpcclnt across the delayed connectworker. xsconnect stores task-tkclient in sockxprt::clnt as a raw pointer...

CVE-2026-72245

CVE-2026-72245 relates to the Linux kernel GPU host1x driver, where a reference leak could occur in host1x_device_parse_dt() after device_initialize(). The embedded struct device was freed directly via kfree(device) in the error path, bypassing normal device lifetime handling and leaking a refere...

EUVD-2026-59144

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

CVE-2026-72245 gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

CVE-2026-72245 gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

CVE-2026-72240 mfd: sm501: Fix reference leak on failed device registration

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix reference leak on failed device registration When platformdeviceregister fails in sm501registerdevice, the embedded struct device in pdev has already been initialized by deviceinitialize, but the failure path only...

CVE-2026-72240

The CVE-2026-72240 entry describes a Linux kernel issue in the mfd: sm501 driver where a reference leak occurs when platform_device_register() fails during sm501_register_device(). The embedded struct device in pdev is initialized (via device_initialize()), then proceeds through setup_pdev_dma_ma...

CVE-2026-72240 mfd: sm501: Fix reference leak on failed device registration

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix reference leak on failed device registration When platformdeviceregister fails in sm501registerdevice, the embedded struct device in pdev has already been initialized by deviceinitialize, but the failure path only...

EUVD-2026-59139

In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix reference leak on failed device registration When platformdeviceregister fails in sm501registerdevice, the embedded struct device in pdev has already been initialized by deviceinitialize, but the failure path only...

CVE-2026-72214

The CVE relates to the Linux kernel driver power: supply: cpcap-battery. A reference leak occurs in cpcap_battery_detect_battery_type() where an nvmem_device obtained via nvmem_device_find() is not released with nvmem_device_put() on success or read-failure paths, allowing a permanent reference t...

CVE-2026-72214 power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmemdeviceput causing reference leak In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained via nvmemdevicefind is not released with nvmemdeviceput on the success or...

CVE-2026-72214 power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmemdeviceput causing reference leak In cpcapbatterydetectbatterytype, the reference to an nvmem device obtained via nvmemdevicefind is not released with nvmemdeviceput on the success or...