CVE-2026-72214power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak In cpcap_battery_detect_battery_type(), the reference to an nvmem device obtained via nvmem_device_find() is not released with nvmem_device_put() on the success or read-failure paths, causing a permanent reference leak. The driver’s retry logic on subsequent battery property reads can compound this leak, preventing the nvmem device from ever being freed. Found by code review.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from fd46821e85de90fb5b7356251164af4815b6e3f6 before fc65520fe0781a1ff46631f111e07b4a1c677b96; from fd46821e85de90fb5b7356251164af4815b6e3f6 before 700c225d829a1256b59053c34a1a9d1a6ab70b09; from fd46821e85de90fb5b7356251164af4815b6e3f6 before deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2; from fd46821e85de90fb5b7356251164af4815b6e3f6 before a3d81de441233a92ec21469cd0c4eb3c26b95cd8; from fd46821e85de90fb5b7356251164af4815b6e3f6 before b56a5cbf8f1f1a5740f1137c89b14d0373309d8d; from fd46821e85de90fb5b7356251164af4815b6e3f6 before a2c14ff63e0e02e3c832385e523e9cc81301171c | CNA record |
References
- https://git.kernel.org/stable/c/fc65520fe0781a1ff46631f111e07b4a1c677b96
- https://git.kernel.org/stable/c/700c225d829a1256b59053c34a1a9d1a6ab70b09
- https://git.kernel.org/stable/c/deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2
- https://git.kernel.org/stable/c/a3d81de441233a92ec21469cd0c4eb3c26b95cd8
- https://git.kernel.org/stable/c/b56a5cbf8f1f1a5740f1137c89b14d0373309d8d
- https://git.kernel.org/stable/c/a2c14ff63e0e02e3c832385e523e9cc81301171c
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.