CVE-2026-72059: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
t7xxcldmalateinit() creates mdctrl->gpddmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized rings but leaves the DMA pool allocated.
Destroy mdctrl->gpddmapool on the late-init failure path to avoid leaking the DMA pool.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72059?
CVE-2026-72059 has a severity rating of 9, indicating it poses a significant risk.
What is CVE-2026-72059 about?
CVE-2026-72059 describes a vulnerability in the Linux kernel related to improper management of DMA pools during the initialization of CLDMA.
How do I fix CVE-2026-72059?
To fix CVE-2026-72059, update your Linux kernel to the version that includes the latest security patches addressing this issue.
What systems are affected by CVE-2026-72059?
CVE-2026-72059 affects systems running vulnerable versions of the Linux kernel that utilize the t7xx driver's CLDMA component.
Is there a workaround for CVE-2026-72059?
Currently, there are no officially recommended workarounds for CVE-2026-72059; it is advised to apply the security update as soon as possible.