AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72171

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of slram_mtdlist entries, where a failure during device registration can leave partially initialized entries on the global list. This can lead to potential dereferencing or freeing of invalid memory, resulting in system instability or crashes. Linux system administrators and developers should prioritize this issue to ensure the integrity and reliability of their systems.

CVE
CVE-2026-72171
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list register_device() links a new slram_mtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap(), or mtd_device_register() fails, the partially initialized entry remains on the global list. A later cleanup can then dereference or free invalid state from that failed entry. Unwind the partially initialized entry and clear the list tail on each failure path after the entry has been linked.