CVE-2026-72245 gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

EUVD-2026-59144

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

CVE-2026-72245 gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path

In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1xdeviceparsedt error path After deviceinitialize, the embedded struct device in struct host1xdevice should be released through the device core with putdevice. In host1xdeviceadd, if...

CVE-2026-72245

CVE-2026-72245 relates to the Linux kernel GPU host1x driver, where a reference leak could occur in host1x_device_parse_dt() after device_initialize(). The embedded struct device was freed directly via kfree(device) in the error path, bypassing normal device lifetime handling and leaking a refere...

CVE-2026-72223 nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leaks memory when arena discovery fail...

EUVD-2026-59122

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leaks memory when arena discovery fail...

CVE-2026-72224

The CVE concerns the Linux kernel nvdimm/btt code path: arenas allocated by discover_arenas() or create_arenas() are not freed on certain error paths in btt_init(), causing a memory leak during BTT initialization failure. The practical impact is leaked memory during failed BTT initialization. The...

CVE-2026-72223 nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discoverarenas error path Memory allocated by bttfreelistinit, bttrttinit, and bttmaplocksinit is not freed on some discoverarenas error paths. This leaks memory when arena discovery fail...

CVE-2026-72224 nvdimm/btt: Free arenas on btt_init() error paths

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on bttinit error paths The arenas allocated by discoverarenas or createarenas are not freed on some error paths in bttinit. This leaks memory when BTT initialization fails. Call freearenas from the affecte...

CVE-2026-72223

The CVE-2026-72223 entry concerns the Linux kernel, specifically the nvdimm/btt component. The vulnerability stems from memory allocated by btt_freelist_init(), btt_rtt_init(), and btt_maplocks_init() not being freed on certain discover_arenas() error paths, causing a memory leak when arena disco...

CVE-2026-72224 nvdimm/btt: Free arenas on btt_init() error paths

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on bttinit error paths The arenas allocated by discoverarenas or createarenas are not freed on some error paths in bttinit. This leaks memory when BTT initialization fails. Call freearenas from the affecte...

CVE-2026-72212 mm/memory_hotplug: fix incorrect altmap passing in error path

In the Linux kernel, the following vulnerability has been resolved: mm/memoryhotplug: fix incorrect altmap passing in error path In createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemmap pages are allocated from params.altmap. If creatememoryblockdevice...

CVE-2026-72212 mm/memory_hotplug: fix incorrect altmap passing in error path

In the Linux kernel, the following vulnerability has been resolved: mm/memoryhotplug: fix incorrect altmap passing in error path In createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemmap pages are allocated from params.altmap. If creatememoryblockdevice...

EUVD-2026-58970

In the Linux kernel, the following vulnerability has been resolved: mm/memoryhotplug: fix incorrect altmap passing in error path In createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemmap pages are allocated from params.altmap. If creatememoryblockdevice...

CVE-2026-72184

The CVE-2026-72184 issue in the Linux kernel NTFS code leaks memory: ntfs_non_resident_attr_insert_range() allocates hole_rl, and on failure of ntfs_attr_map_whole_runlist() the error path drops ni->runlist.lock and returns without freeing hole_rl, leaking sizeof(*hole_rl) * 2 bytes. The fix f...

CVE-2026-72184 ntfs: fix hole runlist memory leak in insert range error path

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfsnonresidentattrinsertrange allocates holerl before mapping the whole runlist. If ntfsattrmapwholerunlist fails, the error path drops ni-runlist.lock and returns...

EUVD-2026-58942

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfsnonresidentattrinsertrange allocates holerl before mapping the whole runlist. If ntfsattrmapwholerunlist fails, the error path drops ni-runlist.lock and returns...

CVE-2026-72184 ntfs: fix hole runlist memory leak in insert range error path

In the Linux kernel, the following vulnerability has been resolved: ntfs: fix hole runlist memory leak in insert range error path ntfsnonresidentattrinsertrange allocates holerl before mapping the whole runlist. If ntfsattrmapwholerunlist fails, the error path drops ni-runlist.lock and returns...

CVE-2026-72177

Summary: CVE-2026-72177 relates to the Linux kernel’s damon_sysfs subsystem. The error paths in damon_sysfs_access_pattern_add_dirs() and damon_sysfs_scheme_add_dirs() incorrectly put references to directories in the wrong order, which can cause an uninitialized memory dereference and/or memory l...

CVE-2026-72177 mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in accesspatternadddirs Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in error paths". Error paths of damonsysfsaccesspatternadddirs and damonsysfsschemeadddirs...