-

CVE-2026-72179

riscv: cacheinfo: Fix node reference leak in populate_cache_leaves

In the Linux kernel, the following vulnerability has been resolved:

riscv: cacheinfo: Fix node reference leak in populate_cache_leaves

Currently, the while loop drops the reference to prev in each iteration.
If the loop terminates early due to a break, the final of_node_put(np)
correctly drops the reference to the current node.

However, if the loop terminates naturally because np == NULL, calling
of_node_put(np) is a no-op. This leaves the last valid node stored in
prev without its reference dropped, resulting in a node reference leak.

Fix this by changing the final `of_node_put(np)` to `of_node_put(prev)`.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f
Version < 2560c97f63bb99b26d9f19b23a4f66ea24c9dc14
Status affected
Version 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f
Version < 51afb7da697b698996351740b4f39fb05ce2afd4
Status affected
Version 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f
Version < 880ac50b0bfae06d7ab5f1843253adfb86aa173a
Status affected
Version 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f
Version < f322955d9a1c344ed943752f05aacea7bc22e025
Status affected
Version 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f
Version < 36e4843fe39ea2f17f4de6d59fba26271916c184
Status affected
Version 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f
Version < bf4a195f063b0a0805c1417f6aad1dd32ea48f0f
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.0
Status affected
Version 0
Version < 5.0
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.21% 0.11
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/2560c97f63bb99b26d9f19b23a4f66ea24c9dc14
https://git.kernel.org/stable/c/51afb7da697b698996351740b4f39fb05ce2afd4
https://git.kernel.org/stable/c/880ac50b0bfae06d7ab5f1843253adfb86aa173a
https://git.kernel.org/stable/c/f322955d9a1c344ed943752f05aacea7bc22e025
https://git.kernel.org/stable/c/36e4843fe39ea2f17f4de6d59fba26271916c184
https://git.kernel.org/stable/c/bf4a195f063b0a0805c1417f6aad1dd32ea48f0f