SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72026

UNKNOWN · CVSS N/A EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of firmware nodes during the initialization of the IMSIC state, where a failure to set up the state leads to a memory leak due to an unfreed allocated fwnode. This could potentially result in resource exhaustion and impact system stability. Organizations using Linux systems, particularly those relying on RISC-V architecture, should prioritize addressing this issue to ensure optimal performance and resource management.

CVE
CVE-2026-72026
Severity
UNKNOWN
CVSS
N/A
EPSS
0.20%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure imsic_early_acpi_init() allocates a firmware node before setting up the IMSIC state. If imsic_setup_state() fails, the function returns without freeing the allocated fwnode. Free the fwnode and clear the global pointer on this error path, matching the cleanup already done when imsic_early_probe() fails. [ tglx: Use a common cleanup path instead of copying code around ]