CVE-2026-72223

nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

Memory allocated by btt_freelist_init(), btt_rtt_init(), and btt_maplocks_init() is not freed on some discover_arenas() error paths. This leaks memory when arena discovery fails.

Add the missing kfree() calls to release the allocations before returning an error.

[ as: commit message and log edits ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5212e11fde4d40fa627668b4f2222d20db488f71 to before 2d0364937550a7b3e2592629c2a68753ac020b28Affected 5212e11fde4d40fa627668b4f2222d20db488f71 to before eeb95774bc79268e2b78ebf01d8781560b5bd671Affected 5212e11fde4d40fa627668b4f2222d20db488f71 to before 7563f69caa9143a491d5f26e563255c734751545Affected 5212e11fde4d40fa627668b4f2222d20db488f71 to before 0b0d9404951aacc9717aa61e77af4a6e9e8f8249Affected 5212e11fde4d40fa627668b4f2222d20db488f71 to before 873ced7f345e99f7ee16f9ff226515580332ecc4Affected 5212e11fde4d40fa627668b4f2222d20db488f71 to before 30d490bb2c4cd220e7dedf862ab6a09eb5dcbad5Affected 5212e11fde4d40fa627668b4f2222d20db488f71 to before ba59b96d8d21dc8729fca44a022ca5919c1848c9Affected 5212e11fde4d40fa627668b4f2222d20db488f71 to before 13fe4cd9ddd0aacb7777812328be525a11ea3feaAffected
LinuxLinux	4.2Affected before 4.2Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

5212e11fde4d40fa627668b4f2222d20db488f71 to before 2d0364937550a7b3e2592629c2a68753ac020b28Affected
5212e11fde4d40fa627668b4f2222d20db488f71 to before eeb95774bc79268e2b78ebf01d8781560b5bd671Affected
5212e11fde4d40fa627668b4f2222d20db488f71 to before 7563f69caa9143a491d5f26e563255c734751545Affected
5212e11fde4d40fa627668b4f2222d20db488f71 to before 0b0d9404951aacc9717aa61e77af4a6e9e8f8249Affected
5212e11fde4d40fa627668b4f2222d20db488f71 to before 873ced7f345e99f7ee16f9ff226515580332ecc4Affected
5212e11fde4d40fa627668b4f2222d20db488f71 to before 30d490bb2c4cd220e7dedf862ab6a09eb5dcbad5Affected
5212e11fde4d40fa627668b4f2222d20db488f71 to before ba59b96d8d21dc8729fca44a022ca5919c1848c9Affected
5212e11fde4d40fa627668b4f2222d20db488f71 to before 13fe4cd9ddd0aacb7777812328be525a11ea3feaAffected

LinuxLinux

4.2Affected
before 4.2Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.