CVE-2026-72171: mtd: slram: remove failed entries from the device list
In the Linux kernel, the following vulnerability has been resolved:
mtd: slram: remove failed entries from the device list
registerdevice() links a new slrammtdlist entry before allocating all of the state needed by the entry. If a later allocation, memremap(), or mtddeviceregister() fails, the partially initialized entry remains on the global list. A later cleanup can then dereference or free invalid state from that failed entry.
Unwind the partially initialized entry and clear the list tail on each failure path after the entry has been linked.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72171?
CVE-2026-72171 has a risk score of 34, indicating a moderate level of severity.
How do I fix CVE-2026-72171?
To fix CVE-2026-72171, update your Linux kernel to the latest patched version where the vulnerability is resolved.
What components are affected by CVE-2026-72171?
CVE-2026-72171 affects the Linux kernel's slram memory technology device management.
What potential impact does CVE-2026-72171 have?
CVE-2026-72171 could lead to improper device list management, potentially causing device failures.
When was CVE-2026-72171 published?
CVE-2026-72171 was published on August 15, 2026.