CVE-2026-72167

Summary

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: pl353: fix probe resource allocation

During probe(), the devm_ioremap() is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released.

Target the pl35x device in the devm_ioremap() instead of its parent.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux08d8c62164a322eb923034acacf25246b775593a < 593201a8f43864cb7e25197095f6716a589584fdaffected
LinuxLinux08d8c62164a322eb923034acacf25246b775593a < 862c6738833b5b01c801cc47023272f5eaa9a7b2affected
LinuxLinux08d8c62164a322eb923034acacf25246b775593a < afddc648403511b6d2e978e73686c77549bc72b3affected
LinuxLinux08d8c62164a322eb923034acacf25246b775593a < c4c9180b3b23f82e1ec429350b420c45c5b5100eaffected
LinuxLinux08d8c62164a322eb923034acacf25246b775593a < ace3a0c839f3bfe1779c6708e7709c824b96dc2faffected
LinuxLinux08d8c62164a322eb923034acacf25246b775593a < 3c44f6c62f652d3ac9d03beb8a199e6388256cddaffected
LinuxLinux08d8c62164a322eb923034acacf25246b775593a < 19ed11aee966d91beebdef9d32ce926474872f79affected
LinuxLinux5.14affected
LinuxLinux0 < 5.14unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References