CVE-2026-72167

mtd: rawnand: pl353: fix probe resource allocation

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: pl353: fix probe resource allocation

During probe(), the devm_ioremap() is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released.

Target the pl35x device in the devm_ioremap() instead of its parent.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	08d8c62164a322eb923034acacf25246b775593a to before 593201a8f43864cb7e25197095f6716a589584fdAffected 08d8c62164a322eb923034acacf25246b775593a to before 862c6738833b5b01c801cc47023272f5eaa9a7b2Affected 08d8c62164a322eb923034acacf25246b775593a to before afddc648403511b6d2e978e73686c77549bc72b3Affected 08d8c62164a322eb923034acacf25246b775593a to before c4c9180b3b23f82e1ec429350b420c45c5b5100eAffected 08d8c62164a322eb923034acacf25246b775593a to before ace3a0c839f3bfe1779c6708e7709c824b96dc2fAffected 08d8c62164a322eb923034acacf25246b775593a to before 3c44f6c62f652d3ac9d03beb8a199e6388256cddAffected 08d8c62164a322eb923034acacf25246b775593a to before 19ed11aee966d91beebdef9d32ce926474872f79Affected
LinuxLinux	5.14Affected before 5.14Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

08d8c62164a322eb923034acacf25246b775593a to before 593201a8f43864cb7e25197095f6716a589584fdAffected
08d8c62164a322eb923034acacf25246b775593a to before 862c6738833b5b01c801cc47023272f5eaa9a7b2Affected
08d8c62164a322eb923034acacf25246b775593a to before afddc648403511b6d2e978e73686c77549bc72b3Affected
08d8c62164a322eb923034acacf25246b775593a to before c4c9180b3b23f82e1ec429350b420c45c5b5100eAffected
08d8c62164a322eb923034acacf25246b775593a to before ace3a0c839f3bfe1779c6708e7709c824b96dc2fAffected
08d8c62164a322eb923034acacf25246b775593a to before 3c44f6c62f652d3ac9d03beb8a199e6388256cddAffected
08d8c62164a322eb923034acacf25246b775593a to before 19ed11aee966d91beebdef9d32ce926474872f79Affected

LinuxLinux

5.14Affected
before 5.14Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.