CVE-2026-72260

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72260", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.915Z", "datePublished": "2026-08-15T05:54:48.409Z", "dateUpdated": "2026-08-23T12:47:10.221Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-23T12:47:10.221Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8192: Check runtime resume during probe\n\nThe MT8192 AFE probe enables runtime PM temporarily while reinitializing\nthe regmap cache from hardware, but it uses pm_runtime_get_sync()\nwithout checking the return value. If runtime resume fails, probe keeps\ngoing without the device necessarily being accessible, and\npm_runtime_get_sync() may leave the PM usage count incremented.\n\nThe regmap_reinit_cache() failure path also returns before dropping the\ntemporary PM reference and before clearing pm_runtime_bypass_reg_ctl.\n\nUse pm_runtime_resume_and_get() so resume failures do not leak a usage\ncount, and clear the temporary bypass flag after dropping the probe PM\nreference on all regmap_reinit_cache() outcomes."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/mediatek/mt8192/mt8192-afe-pcm.c"], "versions": [{"version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "lessThan": "9339266a8a720889d0385cfd78ba6652fe7bb1a8", "status": "affected", "versionType": "git"}, {"version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "lessThan": "91b20e8c9b64042056d14394c89c81fc16a1c327", "status": "affected", "versionType": "git"}, {"version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "lessThan": "6e2ee6eacc3ec7b339753abcf33812d27e03efe5", "status": "affected", "versionType": "git"}, {"version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "lessThan": "faa97a1a6cab01cd3e2055deb4db4e57efc43ff2", "status": "affected", "versionType": "git"}, {"version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "lessThan": "e0f276f1918a202e9c3ac72baffd311cecb6b8db", "status": "affected", "versionType": "git"}, {"version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "lessThan": "f6e424835cc05d215c57b6370b2c1e353dd02915", "status": "affected", "versionType": "git"}, {"version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "lessThan": "e24d5dde56a50946020b134fa8448869093db76a", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["sound/soc/mediatek/mt8192/mt8192-afe-pcm.c"], "versions": [{"version": "5.11", "status": "affected"}, {"version": "0", "lessThan": "5.11", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.217", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.184", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.148", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.101", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "5.15.217"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.1.184"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.6.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.12.101"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/9339266a8a720889d0385cfd78ba6652fe7bb1a8"}, {"url": "https://git.kernel.org/stable/c/91b20e8c9b64042056d14394c89c81fc16a1c327"}, {"url": "https://git.kernel.org/stable/c/6e2ee6eacc3ec7b339753abcf33812d27e03efe5"}, {"url": "https://git.kernel.org/stable/c/faa97a1a6cab01cd3e2055deb4db4e57efc43ff2"}, {"url": "https://git.kernel.org/stable/c/e0f276f1918a202e9c3ac72baffd311cecb6b8db"}, {"url": "https://git.kernel.org/stable/c/f6e424835cc05d215c57b6370b2c1e353dd02915"}, {"url": "https://git.kernel.org/stable/c/e24d5dde56a50946020b134fa8448869093db76a"}], "title": "ASoC: mediatek: mt8192: Check runtime resume during probe", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["sound/soc/mediatek/mt8192/mt8192-afe-pcm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "9339266a8a720889d0385cfd78ba6652fe7bb1a8", "status": "affected", "version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "versionType": "git"}, {"lessThan": "91b20e8c9b64042056d14394c89c81fc16a1c327", "status": "affected", "version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "versionType": "git"}, {"lessThan": "6e2ee6eacc3ec7b339753abcf33812d27e03efe5", "status": "affected", "version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "versionType": "git"}, {"lessThan": "faa97a1a6cab01cd3e2055deb4db4e57efc43ff2", "status": "affected", "version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "versionType": "git"}, {"lessThan": "e0f276f1918a202e9c3ac72baffd311cecb6b8db", "status": "affected", "version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "versionType": "git"}, {"lessThan": "f6e424835cc05d215c57b6370b2c1e353dd02915", "status": "affected", "version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "versionType": "git"}, {"lessThan": "e24d5dde56a50946020b134fa8448869093db76a", "status": "affected", "version": "125ab5d588b0b3b842064c4d53a666ca74521ae8", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["sound/soc/mediatek/mt8192/mt8192-afe-pcm.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.11"}, {"lessThan": "5.11", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.217", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.184", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.148", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.101", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: mediatek: mt8192: Check runtime resume during probe\n\nThe MT8192 AFE probe enables runtime PM temporarily while reinitializing\nthe regmap cache from hardware, but it uses pm_runtime_get_sync()\nwithout checking the return value. If runtime resume fails, probe keeps\ngoing without the device necessarily being accessible, and\npm_runtime_get_sync() may leave the PM usage count incremented.\n\nThe regmap_reinit_cache() failure path also returns before dropping the\ntemporary PM reference and before clearing pm_runtime_bypass_reg_ctl.\n\nUse pm_runtime_resume_and_get() so resume failures do not leak a usage\ncount, and clear the temporary bypass flag after dropping the probe PM\nreference on all regmap_reinit_cache() outcomes."}], "id": "CVE-2026-72260", "lastModified": "2026-08-23T13:16:42.790", "metrics": {}, "published": "2026-08-15T06:21:54.100", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6e2ee6eacc3ec7b339753abcf33812d27e03efe5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/91b20e8c9b64042056d14394c89c81fc16a1c327"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9339266a8a720889d0385cfd78ba6652fe7bb1a8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e0f276f1918a202e9c3ac72baffd311cecb6b8db"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/e24d5dde56a50946020b134fa8448869093db76a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f6e424835cc05d215c57b6370b2c1e353dd02915"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/faa97a1a6cab01cd3e2055deb4db4e57efc43ff2"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: ASoC: mediatek: mt8192: Check runtime resume during probe", "id": "2516621", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516621"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-911", "details": ["A flaw was found in the Advanced Linux Sound Architecture (ALSA) System on Chip (ASoC) Mediatek MT8192 audio driver in the Linux kernel. During the device probe process, the driver fails to properly check the return value of a runtime power management (PM) function. If the runtime resume operation fails, the system may continue without the device being fully accessible, potentially leading to a resource leak where the PM usage count remains incremented. This can result in system instability or a denial of service."], "name": "CVE-2026-72260", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-72260\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72260\nhttps://lore.kernel.org/linux-cve-announce/2026081554-CVE-2026-72260-9ed0@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[125ab5d588b0b3b842064c4d53a666ca74521ae8,6e2ee6eacc3ec7b339753abcf33812d27e03efe5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[125ab5d588b0b3b842064c4d53a666ca74521ae8,faa97a1a6cab01cd3e2055deb4db4e57efc43ff2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[125ab5d588b0b3b842064c4d53a666ca74521ae8,e0f276f1918a202e9c3ac72baffd311cecb6b8db)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[125ab5d588b0b3b842064c4d53a666ca74521ae8,f6e424835cc05d215c57b6370b2c1e353dd02915)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[125ab5d588b0b3b842064c4d53a666ca74521ae8,e24d5dde56a50946020b134fa8448869093db76a)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.11"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,5.11)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.148,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.101,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.40,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T10:15:03.141757+00:00", "updated": "2026-08-22T10:15:04.757026+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}