CVE-2026-72214: power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
In the Linux kernel, the following vulnerability has been resolved:
power: supply: cpcap-battery: Fix missing nvmemdeviceput() causing reference leak
In cpcapbatterydetectbatterytype(), the reference to an nvmem device obtained via nvmemdevicefind() is not released with nvmemdeviceput() on the success or read-failure paths, causing a permanent reference leak. The driver’s retry logic on subsequent battery property reads can compound this leak, preventing the nvmem device from ever being freed.
Found by code review.