AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72432

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the tpm_crb driver in the Linux kernel, where a lack of proper validation for the ACPI companion object during device probing could allow platform drivers to incorrectly match devices. This oversight may lead to potential system instability or exploitation by malicious actors who can manipulate device associations. Organizations using Linux systems with the affected kernel should prioritize this update to mitigate risks associated with device misconfiguration and ensure system integrity.

CVE
CVE-2026-72432
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: tpm_crb: Check ACPI_COMPANION() against NULL during probe Every platform driver can be forced to match a device that doesn't match its list of device IDs because of device_match_driver_override(), so platform drivers that rely on the existence of a device's ACPI companion object need to verify its presence. Accordingly, add a requisite ACPI_COMPANION() check against NULL to the tpm_crb driver.