CVE-2026-72179

Summary

In the Linux kernel, the following vulnerability has been resolved:

riscv: cacheinfo: Fix node reference leak in populate_cache_leaves

Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of_node_put(np) correctly drops the reference to the current node.

However, if the loop terminates naturally because np == NULL, calling of_node_put(np) is a no-op. This leaves the last valid node stored in prev without its reference dropped, resulting in a node reference leak.

Fix this by changing the final of_node_put(np) to of_node_put(prev).

Affected Software

VendorProductVersion RangeStatus
LinuxLinux94f9bf118f1e294b3f2092f8bde02860f5e3ea3f < 2560c97f63bb99b26d9f19b23a4f66ea24c9dc14affected
LinuxLinux94f9bf118f1e294b3f2092f8bde02860f5e3ea3f < 51afb7da697b698996351740b4f39fb05ce2afd4affected
LinuxLinux94f9bf118f1e294b3f2092f8bde02860f5e3ea3f < 880ac50b0bfae06d7ab5f1843253adfb86aa173aaffected
LinuxLinux94f9bf118f1e294b3f2092f8bde02860f5e3ea3f < f322955d9a1c344ed943752f05aacea7bc22e025affected
LinuxLinux94f9bf118f1e294b3f2092f8bde02860f5e3ea3f < 36e4843fe39ea2f17f4de6d59fba26271916c184affected
LinuxLinux94f9bf118f1e294b3f2092f8bde02860f5e3ea3f < bf4a195f063b0a0805c1417f6aad1dd32ea48f0faffected
LinuxLinux5.0affected
LinuxLinux0 < 5.0unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References