CVE-2026-72453regcache: Do not overwrite error code when finalizing cache after error
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cache_ops->populate callback, and if cache operations include an exit callback, the error code from populate() is overwritten with the return value from exit(). This hides the error condition from the caller of regcache_init(), and can cause NULL pointer dereferences when the regcache is later accessed.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 94a3a95f03154d8d4c6206950a7f6ef9a30baec6 builds before 9f171aa115ec76be02c76c5765cd2c865279e34a; from 94a3a95f03154d8d4c6206950a7f6ef9a30baec6 before 9108f7fa493b4c88cbc09503e0c164244456bad5 | CNA record |
References
- https://git.kernel.org/stable/c/9f171aa115ec76be02c76c5765cd2c865279e34a
- https://git.kernel.org/stable/c/9108f7fa493b4c88cbc09503e0c164244456bad5
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.