CVE-2026-72167: mtd: rawnand: pl353: fix probe resource allocation
In the Linux kernel, the following vulnerability has been resolved:
mtd: rawnand: pl353: fix probe resource allocation
During probe(), the devmioremap() is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released.
Target the pl35x device in the devmioremap() instead of its parent.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72167?
CVE-2026-72167 has a severity rating of 10, indicating it is critical.
How do I fix CVE-2026-72167?
To fix CVE-2026-72167, update your Linux kernel to the latest version where the vulnerability is patched.
What systems are affected by CVE-2026-72167?
CVE-2026-72167 affects systems using the Linux kernel that implements the mtd: rawnand: pl353 driver.
Can CVE-2026-72167 lead to data loss?
Yes, CVE-2026-72167 could lead to data loss due to improper resource allocation when the module is unloaded.
What could an attacker achieve by exploiting CVE-2026-72167?
An attacker could exploit CVE-2026-72167 to gain access to system resources, possibly leading to further attacks.