CVE-2026-72109

net: sparx5: unregister blocking notifier on init failure

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: sparx5: unregister blocking notifier on init failure

sparx5_register_notifier_blocks() registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregisters the switchdev and netdevice notifiers, but leaves the blocking notifier registered.

Add a separate error label for the workqueue allocation failure path and unregister the switchdev blocking notifier there.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d6fce5141929697a27f029c633433d487f6f62cb to before fbc65b17508ed5464b7106e7fa5f15251ca1b603Affected d6fce5141929697a27f029c633433d487f6f62cb to before e5afc6d3fabdf1f605d63c4b34a3df6c359e81f3Affected d6fce5141929697a27f029c633433d487f6f62cb to before cf419c869e0d03aad4b6f4ecf0a813851930dfe7Affected d6fce5141929697a27f029c633433d487f6f62cb to before d6084c47389fd6978a5d66b0d58206a548c792a9Affected d6fce5141929697a27f029c633433d487f6f62cb to before 8a3c44a003176282ee4306b7c96e5a536c6f0707Affected d6fce5141929697a27f029c633433d487f6f62cb to before 17f113e7b622dc850992ade540181717de6a8561Affected d6fce5141929697a27f029c633433d487f6f62cb to before 483be61b4a9a6df3b7cb277e8f189e082dee4cb8Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

d6fce5141929697a27f029c633433d487f6f62cb to before fbc65b17508ed5464b7106e7fa5f15251ca1b603Affected
d6fce5141929697a27f029c633433d487f6f62cb to before e5afc6d3fabdf1f605d63c4b34a3df6c359e81f3Affected
d6fce5141929697a27f029c633433d487f6f62cb to before cf419c869e0d03aad4b6f4ecf0a813851930dfe7Affected
d6fce5141929697a27f029c633433d487f6f62cb to before d6084c47389fd6978a5d66b0d58206a548c792a9Affected
d6fce5141929697a27f029c633433d487f6f62cb to before 8a3c44a003176282ee4306b7c96e5a536c6f0707Affected
d6fce5141929697a27f029c633433d487f6f62cb to before 17f113e7b622dc850992ade540181717de6a8561Affected
d6fce5141929697a27f029c633433d487f6f62cb to before 483be61b4a9a6df3b7cb277e8f189e082dee4cb8Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.