CVE-2026-72258

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72258", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.915Z", "datePublished": "2026-08-15T05:54:45.181Z", "dateUpdated": "2026-08-17T05:11:16.853Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-17T05:11:16.853Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8183: Release reserved memory on cleanup\n\nThe MT8183 AFE probe can assign reserved memory with\nof_reserved_mem_device_init(), but the assignment is never released on\ndriver removal or later probe failures.\n\nRegister a devm cleanup action so the reserved memory assignment is\nreleased consistently, matching newer Mediatek AFE drivers."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/mediatek/mt8183/mt8183-afe-pcm.c"], "versions": [{"version": "aa771d2928fedd7fb10aa373601eeee0ed8ccfae", "lessThan": "48b6c39883637b444c2f976e7b8ca964b1889561", "status": "affected", "versionType": "git"}, {"version": "3b13b5a4f29e50bbc3c464823cf8c94b93a16367", "lessThan": "e2d05ab62614162797fee28925279d9e8c2f200a", "status": "affected", "versionType": "git"}, {"version": "ec4a10ca4a68ec97f12f4d17d7abb74db34987db", "lessThan": "e42d8322b67f21493a832ec338aad1c93bd01ea7", "status": "affected", "versionType": "git"}, {"version": "ec4a10ca4a68ec97f12f4d17d7abb74db34987db", "lessThan": "03009465312ca35137f84cf84c95686137608deb", "status": "affected", "versionType": "git"}, {"version": "ec4a10ca4a68ec97f12f4d17d7abb74db34987db", "lessThan": "bee65e00c0924ebecf97718d95dcf4a05ee36471", "status": "affected", "versionType": "git"}, {"version": "c2ab521120eb83103bc5927bb7b7aa84043f495f", "status": "affected", "versionType": "git"}, {"version": "40bff79f167ff700cf1f203b1ad54b389d0e7189", "status": "affected", "versionType": "git"}, {"version": "6.6.102", "lessThan": "6.6.145", "status": "affected", "versionType": "semver"}, {"version": "6.12.42", "lessThan": "6.12.97", "status": "affected", "versionType": "semver"}, {"version": "6.15.10", "lessThan": "6.16", "status": "affected", "versionType": "semver"}, {"version": "6.16.1", "lessThan": "6.17", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/mediatek/mt8183/mt8183-afe-pcm.c"], "versions": [{"version": "6.17", "status": "affected"}, {"version": "0", "lessThan": "6.17", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.145", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.97", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.102", "versionEndExcluding": "6.6.145"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.12.42", "versionEndExcluding": "6.12.97"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.17", "versionEndExcluding": "7.2"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.15.10"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.16.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/48b6c39883637b444c2f976e7b8ca964b1889561"}, {"url": "https://git.kernel.org/stable/c/e2d05ab62614162797fee28925279d9e8c2f200a"}, {"url": "https://git.kernel.org/stable/c/e42d8322b67f21493a832ec338aad1c93bd01ea7"}, {"url": "https://git.kernel.org/stable/c/03009465312ca35137f84cf84c95686137608deb"}, {"url": "https://git.kernel.org/stable/c/bee65e00c0924ebecf97718d95dcf4a05ee36471"}], "title": "ASoC: mediatek: mt8183: Release reserved memory on cleanup", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/soc/mediatek/mt8183/mt8183-afe-pcm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "48b6c39883637b444c2f976e7b8ca964b1889561", "status": "affected", "version": "aa771d2928fedd7fb10aa373601eeee0ed8ccfae", "versionType": "git"}, {"lessThan": "e2d05ab62614162797fee28925279d9e8c2f200a", "status": "affected", "version": "3b13b5a4f29e50bbc3c464823cf8c94b93a16367", "versionType": "git"}, {"lessThan": "e42d8322b67f21493a832ec338aad1c93bd01ea7", "status": "affected", "version": "ec4a10ca4a68ec97f12f4d17d7abb74db34987db", "versionType": "git"}, {"lessThan": "03009465312ca35137f84cf84c95686137608deb", "status": "affected", "version": "ec4a10ca4a68ec97f12f4d17d7abb74db34987db", "versionType": "git"}, {"lessThan": "bee65e00c0924ebecf97718d95dcf4a05ee36471", "status": "affected", "version": "ec4a10ca4a68ec97f12f4d17d7abb74db34987db", "versionType": "git"}, {"status": "affected", "version": "c2ab521120eb83103bc5927bb7b7aa84043f495f", "versionType": "git"}, {"status": "affected", "version": "40bff79f167ff700cf1f203b1ad54b389d0e7189", "versionType": "git"}, {"lessThan": "6.6.145", "status": "affected", "version": "6.6.102", "versionType": "semver"}, {"lessThan": "6.12.97", "status": "affected", "version": "6.12.42", "versionType": "semver"}, {"lessThan": "6.16", "status": "affected", "version": "6.15.10", "versionType": "semver"}, {"lessThan": "6.17", "status": "affected", "version": "6.16.1", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/soc/mediatek/mt8183/mt8183-afe-pcm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.17"}, {"lessThan": "6.17", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.145", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.97", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8183: Release reserved memory on cleanup\n\nThe MT8183 AFE probe can assign reserved memory with\nof_reserved_mem_device_init(), but the assignment is never released on\ndriver removal or later probe failures.\n\nRegister a devm cleanup action so the reserved memory assignment is\nreleased consistently, matching newer Mediatek AFE drivers."}], "id": "CVE-2026-72258", "lastModified": "2026-08-17T06:18:28.133", "metrics": {}, "published": "2026-08-15T06:21:53.747", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/03009465312ca35137f84cf84c95686137608deb"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/48b6c39883637b444c2f976e7b8ca964b1889561"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bee65e00c0924ebecf97718d95dcf4a05ee36471"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e2d05ab62614162797fee28925279d9e8c2f200a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e42d8322b67f21493a832ec338aad1c93bd01ea7"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: ASoC: mediatek: mt8183: Release reserved memory on cleanup", "id": "2516578", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516578"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["A flaw was found in the Linux kernel's Advanced Linux Sound Architecture System on Chip (ASoC) Mediatek MT8183 audio driver. The Audio Front End (AFE) probe assigns reserved memory but does not release it when the driver is removed or if probe failures occur. This oversight can lead to a memory leak, potentially causing resource exhaustion and a Denial of Service (DoS) for the system."], "name": "CVE-2026-72258", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-72258\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72258\nhttps://lore.kernel.org/linux-cve-announce/2026081554-CVE-2026-72258-538c@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[aa771d2928fedd7fb10aa373601eeee0ed8ccfae,48b6c39883637b444c2f976e7b8ca964b1889561]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[3b13b5a4f29e50bbc3c464823cf8c94b93a16367,e2d05ab62614162797fee28925279d9e8c2f200a]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ec4a10ca4a68ec97f12f4d17d7abb74db34987db,e42d8322b67f21493a832ec338aad1c93bd01ea7]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ec4a10ca4a68ec97f12f4d17d7abb74db34987db,03009465312ca35137f84cf84c95686137608deb]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[ec4a10ca4a68ec97f12f4d17d7abb74db34987db,bee65e00c0924ebecf97718d95dcf4a05ee36471]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "c2ab521120eb83103bc5927bb7b7aa84043f495f"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "40bff79f167ff700cf1f203b1ad54b389d0e7189"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.6.102,6.6.145]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.12.42,6.12.97]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.15.10,6.16]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[6.16.1,6.17]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.17"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.17)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.6.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.12.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.18.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,7.1.*]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T10:15:03.141898+00:00", "updated": "2026-08-22T09:00:10.781521+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}