Riskcovery

CVE-2026-72179

riscv: cacheinfo: Fix node reference leak in populate_cache_leaves

State
Published
Severity
Not scored
Published
Aug 15, 2026
Updated
Aug 17, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: cacheinfo: Fix node reference leak in populate_cache_leaves

Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of_node_put(np) correctly drops the reference to the current node.

However, if the loop terminates naturally because np == NULL, calling of_node_put(np) is a no-op. This leaves the last valid node stored in prev without its reference dropped, resulting in a node reference leak.

Fix this by changing the final `of_node_put(np)` to `of_node_put(prev)`.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f to before 2560c97f63bb99b26d9f19b23a4f66ea24c9dc14Affected
  • 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f to before 51afb7da697b698996351740b4f39fb05ce2afd4Affected
  • 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f to before 880ac50b0bfae06d7ab5f1843253adfb86aa173aAffected
  • 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f to before f322955d9a1c344ed943752f05aacea7bc22e025Affected
  • 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f to before 36e4843fe39ea2f17f4de6d59fba26271916c184Affected
  • 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f to before bf4a195f063b0a0805c1417f6aad1dd32ea48f0fAffected
LinuxLinux
  • 5.0Affected
  • before 5.0Not affected
  • 6.1.178 through 6.1.*Not affected
  • 6.6.145 through 6.6.*Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.