CVE-2026-72223

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

Memory allocated by btt_freelist_init(), btt_rtt_init(), and btt_maplocks_init() is not freed on some discover_arenas() error paths. This leaks memory when arena discovery fails.

Add the missing kfree() calls to release the allocations before returning an error.

[ as: commit message and log edits ]

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 5212e11fde4d40fa627668b4f2222d20db488f71, < 2d0364937550a7b3e2592629c2a68753ac020b28; >= 5212e11fde4d40fa627668b4f2222d20db488f71, < eeb95774bc79268e2b78ebf01d8781560b5bd671; >= 5212e11fde4d40fa627668b4f2222d20db488f71, < 7563f69caa9143a491d5f26e563255c734751545; >= 5212e11fde4d40fa627668b4f2222d20db488f71, < 0b0d9404951aacc9717aa61e77af4a6e9e8f8249; >= 5212e11fde4d40fa627668b4f2222d20db488f71, < 873ced7f345e99f7ee16f9ff226515580332ecc4; >= 5212e11fde4d40fa627668b4f2222d20db488f71, < 30d490bb2c4cd220e7dedf862ab6a09eb5dcbad5; >= 5212e11fde4d40fa627668b4f2222d20db488f71, < ba59b96d8d21dc8729fca44a022ca5919c1848c9; >= 5212e11fde4d40fa627668b4f2222d20db488f71, < 13fe4cd9ddd0aacb7777812328be525a11ea3fea
LinuxLinux4.2

References

Timeline

Published
Aug 15, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-72224In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt_init() error paths The arenas allocatedCVE-2026-722257.8In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() jCVE-2026-722269.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contCVE-2026-722278.1In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests header Before the accesCVE-2026-72228In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primary_if leak on failed linearization If the sCVE-2026-72229In the Linux kernel, the following vulnerability has been resolved: batman-adv: clean untagged VLAN on netdev registration failure When anCVE-2026-72237.3A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63. Affected by this issue is the function fetch of the fCVE-2026-72230In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet The caller of batadv_fragCVE-2026-722317.5In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pending request batadv_senCVE-2026-722327.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX As documented in commCVE-2026-722338.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb realloc The pskb_may_pCVE-2026-722349.8In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only after skb realloc The p
CVE-2026-72223: Unscored | Vulnix