CVE-2026-72453

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72453", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.932Z", "datePublished": "2026-08-15T05:57:00.921Z", "dateUpdated": "2026-10-30T12:29:26.327Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-30T12:29:26.327Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregcache: Do not overwrite error code when finalizing cache after error\n\nDuring regcache initialization, if an error occurs in the\ncache_ops->populate callback, and if cache operations include an exit\ncallback, the error code from populate() is overwritten with the return\nvalue from exit(). This hides the error condition from the caller of\nregcache_init(), and can cause NULL pointer dereferences when the regcache\nis later accessed."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/base/regmap/regcache.c"], "versions": [{"version": "5e43756123197e7bca4920a47d20d9eff0e203c3", "lessThan": "b454870bbdb3b34ffeaebf0d8e1726cc0aaa2de4", "status": "affected", "versionType": "git"}, {"version": "b498b70a8174bcb4e801d4d794a49f2d143c5c9f", "lessThan": "bae057687f61580dd897411cd749da22a7740647", "status": "affected", "versionType": "git"}, {"version": "94a3a95f03154d8d4c6206950a7f6ef9a30baec6", "lessThan": "9f171aa115ec76be02c76c5765cd2c865279e34a", "status": "affected", "versionType": "git"}, {"version": "94a3a95f03154d8d4c6206950a7f6ef9a30baec6", "lessThan": "9108f7fa493b4c88cbc09503e0c164244456bad5", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/base/regmap/regcache.c"], "versions": [{"version": "6.19", "status": "affected"}, {"version": "0", "lessThan": "6.19", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.19", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/b454870bbdb3b34ffeaebf0d8e1726cc0aaa2de4"}, {"url": "https://git.kernel.org/stable/c/bae057687f61580dd897411cd749da22a7740647"}, {"url": "https://git.kernel.org/stable/c/9f171aa115ec76be02c76c5765cd2c865279e34a"}, {"url": "https://git.kernel.org/stable/c/9108f7fa493b4c88cbc09503e0c164244456bad5"}], "title": "regcache: Do not overwrite error code when finalizing cache after error", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/base/regmap/regcache.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "b454870bbdb3b34ffeaebf0d8e1726cc0aaa2de4", "status": "affected", "version": "5e43756123197e7bca4920a47d20d9eff0e203c3", "versionType": "git"}, {"lessThan": "bae057687f61580dd897411cd749da22a7740647", "status": "affected", "version": "b498b70a8174bcb4e801d4d794a49f2d143c5c9f", "versionType": "git"}, {"lessThan": "9f171aa115ec76be02c76c5765cd2c865279e34a", "status": "affected", "version": "94a3a95f03154d8d4c6206950a7f6ef9a30baec6", "versionType": "git"}, {"lessThan": "9108f7fa493b4c88cbc09503e0c164244456bad5", "status": "affected", "version": "94a3a95f03154d8d4c6206950a7f6ef9a30baec6", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/base/regmap/regcache.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.19"}, {"lessThan": "6.19", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nregcache: Do not overwrite error code when finalizing cache after error\n\nDuring regcache initialization, if an error occurs in the\ncache_ops->populate callback, and if cache operations include an exit\ncallback, the error code from populate() is overwritten with the return\nvalue from exit(). This hides the error condition from the caller of\nregcache_init(), and can cause NULL pointer dereferences when the regcache\nis later accessed."}], "id": "CVE-2026-72453", "lastModified": "2026-10-30T13:19:52.630", "metrics": {}, "published": "2026-08-15T06:22:19.290", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9108f7fa493b4c88cbc09503e0c164244456bad5"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9f171aa115ec76be02c76c5765cd2c865279e34a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b454870bbdb3b34ffeaebf0d8e1726cc0aaa2de4"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/bae057687f61580dd897411cd749da22a7740647"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: regcache: Do not overwrite error code when finalizing cache after error", "id": "2516328", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516328"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-476", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nregcache: Do not overwrite error code when finalizing cache after error\nDuring regcache initialization, if an error occurs in the\ncache_ops->populate callback, and if cache operations include an exit\ncallback, the error code from populate() is overwritten with the return\nvalue from exit(). This hides the error condition from the caller of\nregcache_init(), and can cause NULL pointer dereferences when the regcache\nis later accessed.", "A flaw was found in the Linux kernel's `regcache` mechanism. During initialization, an error in a specific callback function (`cache_ops->populate`) can have its error code overwritten by a subsequent exit routine. This masks the original error, potentially causing the system to attempt operations on uninitialized memory. Such actions can result in NULL pointer dereferences, leading to system instability or a denial of service."], "name": "CVE-2026-72453", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-72453\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72453\nhttps://lore.kernel.org/linux-cve-announce/2026081531-CVE-2026-72453-a018@gregkh/T"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[94a3a95f03154d8d4c6206950a7f6ef9a30baec6,9f171aa115ec76be02c76c5765cd2c865279e34a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[94a3a95f03154d8d4c6206950a7f6ef9a30baec6,9108f7fa493b4c88cbc09503e0c164244456bad5)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.19"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.19)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T18:15:03.781155+00:00", "updated": "2026-08-22T06:30:04.527178+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}