CVE-2026-72026: irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure
In the Linux kernel, the following vulnerability has been resolved:
irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure
imsicearlyacpiinit() allocates a firmware node before setting up the IMSIC state. If imsicsetupstate() fails, the function returns without freeing the allocated fwnode.
Free the fwnode and clear the global pointer on this error path, matching the cleanup already done when imsicearlyprobe() fails.
[ tglx: Use a common cleanup path instead of copying code around ]
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72026?
CVE-2026-72026 has a risk score of 5, indicating a medium severity level.
What is the main issue addressed by CVE-2026-72026?
CVE-2026-72026 addresses a fwnode leak that occurs when the IMSIC state setup fails in the Linux kernel.
How can I mitigate CVE-2026-72026 in my system?
To mitigate CVE-2026-72026, ensure that you upgrade to a version of the Linux kernel that has implemented the fix.
What function is primarily affected by CVE-2026-72026?
The primary function affected by CVE-2026-72026 is imsic_early_acpi_init() in the Linux kernel.
When was CVE-2026-72026 published?
CVE-2026-72026 was published on August 15, 2026.