CVE-2026-72059net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xx_cldma_late_init() creates md_ctrl->gpd_dmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized rings but leaves the DMA pool allocated. Destroy md_ctrl->gpd_dmapool on the late-init failure path to avoid leaking the DMA pool.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 before cef50f9f9045ff5e6a9d62c5110522df98fca645; from 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 before fd01247bde1add970fae7f0003af085333a256e6; from 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 before ebd84cb129fac7f7933628c40fccdfa8a62805de; from 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 before e89b8829693e65217d587dceeaad4826c96c731b; 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 builds before 0c0a8c7821485f32bdb4923fb22f2dd501a27d8a; 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 builds before 2bd6f26d4ce1e87de4d736b1e8896daf3acf1c0e | CNA record |
References
- https://git.kernel.org/stable/c/cef50f9f9045ff5e6a9d62c5110522df98fca645
- https://git.kernel.org/stable/c/fd01247bde1add970fae7f0003af085333a256e6
- https://git.kernel.org/stable/c/ebd84cb129fac7f7933628c40fccdfa8a62805de
- https://git.kernel.org/stable/c/e89b8829693e65217d587dceeaad4826c96c731b
- https://git.kernel.org/stable/c/0c0a8c7821485f32bdb4923fb22f2dd501a27d8a
- https://git.kernel.org/stable/c/2bd6f26d4ce1e87de4d736b1e8896daf3acf1c0e
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.