EUVD-2026-58903

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in memwrite In memwrite, the temporary array returned by parseintarrayuser must be released on all exit paths. Convert the array variable to use cleanup.h scope-based cleanup so it is...

CVE-2026-72145

The documents confirm CVE-2026-72145 affects Linux kernel code in platform/x86/intel/tpmi. The mem_write() path now uses cleanup.h scope-based cleanup to automatically free a temporary array returned by parse_int_array_user(), ensuring release on all exit paths. The array declaration was moved ne...

CVE-2026-72145 platform/x86/intel/tpmi: use cleanup helpers in mem_write()

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in memwrite In memwrite, the temporary array returned by parseintarrayuser must be released on all exit paths. Convert the array variable to use cleanup.h scope-based cleanup so it is...

EUVD-2026-58902

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

CVE-2026-72109 net: sparx5: unregister blocking notifier on init failure

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5registernotifierblocks registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregiste...

CVE-2026-72088

The CVE-2026-72088 entry concerns the Linux kernel SCSI HPSA driver IOACCEL2 reset path. The root cause was a DMA mapping leak when phys_disk->in_reset is set, causing an early return without cleaning up resources allocated for the command. The fix adds proper error cleanup: unmapping the IOAC...

CVE-2026-72088 scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If physdisk-inreset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG...

CVE-2026-72050 octeontx2-af: Free BPID bitmap on setup failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with rvuallocbitmap, which uses a plain kcalloc. If any of the following devmkcalloc allocations for the BPID mapping arrays fails, the function...

CVE-2026-72008 pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HWVOTER type power domains, this driver was unconditionally trying to perform cleanup for DIRECTCTL domains, but only after checking if the...

EUVD-2026-59107

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Should probe fail for HWVOTER type power domains, this driver was unconditionally trying to perform cleanup for DIRECTCTL domains, but only after checking if the...

PT-2026-72857

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Rockchip DRM driver within the dw dp component. The driver uses drmm encoder init to initialize the encoder and drmm add action to register drm encod...

PT-2026-72716

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto: marvell/octeontx component where the sg cleanup path utilizes an incorrect loop index. Specifically, it uses listi instead of listj during the unmapping of...

PT-2026-72715

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the crypto: cavium/cpt component where the sg cleanup function uses an incorrect loop index during the DMA buffer unmapping process. Specifically, the error path...

PT-2026-72701

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the mana network driver where the mana gd create mana wq cq function fails to properly initialize the queue-id variable, leaving it as 0. If the creation process fails...

PT-2026-72333

In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in mem write In mem write, the temporary array returned by parse int array user must be released on all exit paths. Convert the array variable to use cleanup.h scope-based cleanup so i...

PT-2026-72451

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the snd sof load topology function within the ASOC SOF topology component. When the topology filename contains the string "dummy" and the tplg cnt variable is 0,...

PT-2026-72614

In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup clean func state cleans dead stack slots in 4-byte halves. When the high half of a STACK SPILL slot is dead and the low half remains live, cleanup converts the live lo...

PT-2026-72393

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the NTFS driver during mount failures. When the ntfs fill super function fails, the err out now path only frees the volume structure, failing to release other...

PT-2026-72197

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue exists in the mediatek power domain driver. The driver unconditionally attempts to perform cleanup for DIRECT CTL domains when a probe fails for HW VOTER...

PT-2026-73006

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bounds clear bit in ath12k mac dp peer cleanup ath12k mac dp peer cleanup clears the ML peer ID slot on the free ml peer id map bitmap by indexing it with dp peer-peer id. That is wrong: dp peer-peer id f...