CVE-2026-72171
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
In the Linux kernel, a bug was found in the mtd: slram module in the register_device() function, where an entry is linked to the global list before all required state is allocated. If a later allocation, memremap(), or mtd_device_register() fails, the partially initialized entry remains on the list, which can lead to dereference or free of invalid state during later cleanup.
Risk Assessment
The risk includes potential dereference or free of invalid memory, which could lead to system crashes or data integrity issues. Allocation failures are rare, but the impact can be severe.
Recommendation
It is recommended to apply the Linux kernel patch that removes partially initialized entries from the list on error paths. Update systems to avoid potential issues.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: mtd: slram: remove failed entries from the device list register_device() links a new slram_mtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap(), or mtd_device_register() fails, the partially initialized entry remains on the global list. A later cleanup can then dereference or free invalid state from that failed entry. Unwind the partially initialized entry and clear the list tail on each failure path after the entry has been linked.