AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72167

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of resource allocation during the probe process for the pl353 NAND flash controller. This issue can lead to improper memory management, as the register area is not released when the module is unloaded, potentially causing resource leaks. Developers and system administrators using affected Linux distributions with pl35x devices should prioritize addressing this vulnerability to ensure stable memory management and prevent potential system instability.

CVE
CVE-2026-72167
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe(), the devm_ioremap() is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released. Target the pl35x device in the devm_ioremap() instead of its parent.