CVE-2026-72109

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: sparx5: unregister blocking notifier on init failure

sparx5_register_notifier_blocks() registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregisters the switchdev and netdevice notifiers, but leaves the blocking notifier registered.

Add a separate error label for the workqueue allocation failure path and unregister the switchdev blocking notifier there.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd6fce5141929697a27f029c633433d487f6f62cb < fbc65b17508ed5464b7106e7fa5f15251ca1b603affected
LinuxLinuxd6fce5141929697a27f029c633433d487f6f62cb < e5afc6d3fabdf1f605d63c4b34a3df6c359e81f3affected
LinuxLinuxd6fce5141929697a27f029c633433d487f6f62cb < cf419c869e0d03aad4b6f4ecf0a813851930dfe7affected
LinuxLinuxd6fce5141929697a27f029c633433d487f6f62cb < d6084c47389fd6978a5d66b0d58206a548c792a9affected
LinuxLinuxd6fce5141929697a27f029c633433d487f6f62cb < 8a3c44a003176282ee4306b7c96e5a536c6f0707affected
LinuxLinuxd6fce5141929697a27f029c633433d487f6f62cb < 17f113e7b622dc850992ade540181717de6a8561affected
LinuxLinuxd6fce5141929697a27f029c633433d487f6f62cb < 483be61b4a9a6df3b7cb277e8f189e082dee4cb8affected
LinuxLinux5.14affected
LinuxLinux0 < 5.14unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References