CVE-2026-72259ASoC: mediatek: mt8192: Release reserved memory on cleanup
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls of_reserved_mem_device_init() and falls back to preallocated buffers when no reserved memory region is available. When the reserved memory assignment succeeds, however, the driver never releases it. Register a devm cleanup action after a successful reserved-memory assignment so the assignment is released on probe failure and driver unbind.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from aa771d2928fedd7fb10aa373601eeee0ed8ccfae before 989cbe8cc86f4639f4e1fbe84ea0339759e92f1f; from 3b13b5a4f29e50bbc3c464823cf8c94b93a16367 before 756cfc0039fe9dc1388ea231821508a78a087afe; from ec4a10ca4a68ec97f12f4d17d7abb74db34987db before 51c367230e30ed80b49d5330831c1f2c59405b02; from ec4a10ca4a68ec97f12f4d17d7abb74db34987db before 4c9df23e121f1095f02cc7e1531ce3a6d74ff697; from ec4a10ca4a68ec97f12f4d17d7abb74db34987db before 965e17ae6751c5d3302430c8ebd650e72d45a85f; c2ab521120eb83103bc5927bb7b7aa84043f495f; 40bff79f167ff700cf1f203b1ad54b389d0e7189; from 6.6.102 before 6.6.145; and 3 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/989cbe8cc86f4639f4e1fbe84ea0339759e92f1f
- https://git.kernel.org/stable/c/756cfc0039fe9dc1388ea231821508a78a087afe
- https://git.kernel.org/stable/c/51c367230e30ed80b49d5330831c1f2c59405b02
- https://git.kernel.org/stable/c/4c9df23e121f1095f02cc7e1531ce3a6d74ff697
- https://git.kernel.org/stable/c/965e17ae6751c5d3302430c8ebd650e72d45a85f
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.