CVE-2026-72177 mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in accesspatternadddirs Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in error paths". Error paths of damonsysfsaccesspatternadddirs and damonsysfsschemeadddirs...

EUVD-2026-58935

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in accesspatternadddirs Patch series "mm/damon/sysfs-schemes: fix wrong directories put orders in error paths". Error paths of damonsysfsaccesspatternadddirs and damonsysfsschemeadddirs...

EUVD-2026-58934

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for schemeadddirs internal error damonsysfsschemeadddirs setup the triedregions directory after the stats directory setup is completed. When the triedregions directory setup is failed, the setup...

CVE-2026-72176

Summary: CVE-2026-72176 affects the Linux kernel component mm/damon/sysfs-schemes. The vulnerability arises in the error handling of scheme_add_dirs(), where the code path incorrectly releases a reference to the tried_regions directory instead of the stats directory, causing the stats directory o...

CVE-2026-72144 platform/x86: dell-laptop: fix missing cleanups in init error path

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

CVE-2026-72144

Summary (CVE-2026-72144) In the Linux kernel, the Dell X Dell-laptop platform had an init error path cleanup issue in dell_init(): if a later LED or backlight registration failed, not all resources were torn down. Specifically, after dell_setup_rfkill(), resources such as the notifier, debugfs di...

EUVD-2026-58902

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

CVE-2026-72144 platform/x86: dell-laptop: fix missing cleanups in init error path

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-laptop: fix missing cleanups in init error path dellinit initializes several resources after dellsetuprfkill, including the optional touchpad LED, keyboard backlight LED, battery hook, debugfs directory and...

EUVD-2026-58886

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix refcount leak in nvmetsqcreate In nvmetsqcreate, a reference on the ctrl is taken via krefgetunlesszero before calling nvmetchecksqid. If nvmetchecksqid fails, the function returns the error directly without releasing...

CVE-2026-72128

CVE-2026-72128 affects the Linux kernel nvmet subsystem. In nvmet_sq_create(), a reference on the ctrl is taken via kref_get_unless_zero() before nvmet_check_sqid(). If nvmet_check_sqid() fails, the function returns an error without releasing the reference, causing a refcount leak. The fix jumps ...

CVE-2026-72109 net: sparx5: unregister blocking notifier on init failure

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5registernotifierblocks registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregiste...

EUVD-2026-59067

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5registernotifierblocks registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregiste...

CVE-2026-72093 accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap()

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdnagemdmabufmmap When vminsertpages fails, the error path calls vma-vmops-closevma which internally calls drmgemvmclose → drmgemobjectput, releasing the GEM object reference acquired at th...

CVE-2026-72087 scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfcsli4driverresourcesetup The memory allocated for mboxq using mempoolalloc is not freed in some of the early exit error paths. Fix that by moving the mempoolfree call to an earlier point after la...

CVE-2026-72087

CVE-2026-72087 affects the Linux kernel SCSI LPFC driver, specifically the lpfc_sli4_driver_resource_setup() path. The vulnerability is a memory leak: memory allocated for mboxq via mempool_alloc() is not freed in some early exit error paths. The cited fixes relocate mempool_free() to an earlier ...

EUVD-2026-59045

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfcsli4driverresourcesetup The memory allocated for mboxq using mempoolalloc is not freed in some of the early exit error paths. Fix that by moving the mempoolfree call to an earlier point after la...

EUVD-2026-59040

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix refcount leak in efcthwioabort When efcthwreqtagalloc fails in efcthwioabort, the error path returns -ENOSPC without releasing the reference obtained via krefgetunlesszero earlier in the function. All other...

CVE-2026-72081 scsi: elx: efct: Fix I/O leak on unsupported additional CDB

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efctdispatchfcpcmd allocates an efctio before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before...

EUVD-2026-59039

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efctdispatchfcpcmd allocates an efctio before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before...

CVE-2026-72081 scsi: elx: efct: Fix I/O leak on unsupported additional CDB

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efctdispatchfcpcmd allocates an efctio before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before...