0.0
NA
CVE-2026-72167
mtd: rawnand: pl353: fix probe resource allocation
Overview
Description
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe(), the devm_ioremap() is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released. Target the pl35x device in the devm_ioremap() instead of its parent.
Details
INFO
Published Date :
Aug. 15, 2026, 6:21 a.m.
Last Modified :
Aug. 17, 2026, 6:18 a.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
Correct resource allocation during device probe to prevent memory leaks.
- Target the pl35x device in devm_ioremap().
- Ensure device resources are released on module unload.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-72167.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-72167 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-72167
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-72167 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-72167 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 17, 2026
Action Type Old Value New Value Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '593201a8f43864cb7e25197095f6716a589584fd', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '862c6738833b5b01c801cc47023272f5eaa9a7b2', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': 'afddc648403511b6d2e978e73686c77549bc72b3', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': 'c4c9180b3b23f82e1ec429350b420c45c5b5100e', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': 'ace3a0c839f3bfe1779c6708e7709c824b96dc2f', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '3c44f6c62f652d3ac9d03beb8a199e6388256cdd', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '19ed11aee966d91beebdef9d32ce926474872f79', 'versionType': 'git'}], 'programFiles': ['drivers/mtd/nand/raw/pl35x-nand-controller.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.14'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.14', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/mtd/nand/raw/pl35x-nand-controller.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '593201a8f43864cb7e25197095f6716a589584fd', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '862c6738833b5b01c801cc47023272f5eaa9a7b2', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': 'afddc648403511b6d2e978e73686c77549bc72b3', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': 'c4c9180b3b23f82e1ec429350b420c45c5b5100e', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': 'ace3a0c839f3bfe1779c6708e7709c824b96dc2f', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '3c44f6c62f652d3ac9d03beb8a199e6388256cdd', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '19ed11aee966d91beebdef9d32ce926474872f79', 'versionType': 'git'}], 'programFiles': ['drivers/mtd/nand/raw/pl35x-nand-controller.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.14'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.14', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/mtd/nand/raw/pl35x-nand-controller.c'], 'defaultStatus': 'affected'}] -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 15, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '593201a8f43864cb7e25197095f6716a589584fd', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '862c6738833b5b01c801cc47023272f5eaa9a7b2', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': 'afddc648403511b6d2e978e73686c77549bc72b3', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': 'c4c9180b3b23f82e1ec429350b420c45c5b5100e', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': 'ace3a0c839f3bfe1779c6708e7709c824b96dc2f', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '3c44f6c62f652d3ac9d03beb8a199e6388256cdd', 'versionType': 'git'}, {'status': 'affected', 'version': '08d8c62164a322eb923034acacf25246b775593a', 'lessThan': '19ed11aee966d91beebdef9d32ce926474872f79', 'versionType': 'git'}], 'programFiles': ['drivers/mtd/nand/raw/pl35x-nand-controller.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '5.14'}, {'status': 'unaffected', 'version': '0', 'lessThan': '5.14', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/mtd/nand/raw/pl35x-nand-controller.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe(), the devm_ioremap() is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released. Target the pl35x device in the devm_ioremap() instead of its parent. Added Reference https://git.kernel.org/stable/c/19ed11aee966d91beebdef9d32ce926474872f79 Added Reference https://git.kernel.org/stable/c/3c44f6c62f652d3ac9d03beb8a199e6388256cdd Added Reference https://git.kernel.org/stable/c/593201a8f43864cb7e25197095f6716a589584fd Added Reference https://git.kernel.org/stable/c/862c6738833b5b01c801cc47023272f5eaa9a7b2 Added Reference https://git.kernel.org/stable/c/ace3a0c839f3bfe1779c6708e7709c824b96dc2f Added Reference https://git.kernel.org/stable/c/afddc648403511b6d2e978e73686c77549bc72b3 Added Reference https://git.kernel.org/stable/c/c4c9180b3b23f82e1ec429350b420c45c5b5100e
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.