GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2026-72179

Vulnerability from fkie_nvd - Published: 2026-08-15 06:21 - Updated: 2026-08-17 06:18
Severity
Summary
In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of_node_put(np) correctly drops the reference to the current node. However, if the loop terminates naturally because np == NULL, calling of_node_put(np) is a no-op. This leaves the last valid node stored in prev without its reference dropped, resulting in a node reference leak. Fix this by changing the final `of_node_put(np)` to `of_node_put(prev)`.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2560c97f63bb99b26d9f19b23a4f66ea24c9dc14
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/36e4843fe39ea2f17f4de6d59fba26271916c184
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/51afb7da697b698996351740b4f39fb05ce2afd4
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/880ac50b0bfae06d7ab5f1843253adfb86aa173a
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bf4a195f063b0a0805c1417f6aad1dd32ea48f0f
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f322955d9a1c344ed943752f05aacea7bc22e025
Impacted products
Vendor Product Version
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "arch/riscv/kernel/cacheinfo.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "2560c97f63bb99b26d9f19b23a4f66ea24c9dc14",
              "status": "affected",
              "version": "94f9bf118f1e294b3f2092f8bde02860f5e3ea3f",
              "versionType": "git"
            },
            {
              "lessThan": "51afb7da697b698996351740b4f39fb05ce2afd4",
              "status": "affected",
              "version": "94f9bf118f1e294b3f2092f8bde02860f5e3ea3f",
              "versionType": "git"
            },
            {
              "lessThan": "880ac50b0bfae06d7ab5f1843253adfb86aa173a",
              "status": "affected",
              "version": "94f9bf118f1e294b3f2092f8bde02860f5e3ea3f",
              "versionType": "git"
            },
            {
              "lessThan": "f322955d9a1c344ed943752f05aacea7bc22e025",
              "status": "affected",
              "version": "94f9bf118f1e294b3f2092f8bde02860f5e3ea3f",
              "versionType": "git"
            },
            {
              "lessThan": "36e4843fe39ea2f17f4de6d59fba26271916c184",
              "status": "affected",
              "version": "94f9bf118f1e294b3f2092f8bde02860f5e3ea3f",
              "versionType": "git"
            },
            {
              "lessThan": "bf4a195f063b0a0805c1417f6aad1dd32ea48f0f",
              "status": "affected",
              "version": "94f9bf118f1e294b3f2092f8bde02860f5e3ea3f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "arch/riscv/kernel/cacheinfo.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.0"
            },
            {
              "lessThan": "5.0",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: cacheinfo: Fix node reference leak in populate_cache_leaves\n\nCurrently, the while loop drops the reference to prev in each iteration.\nIf the loop terminates early due to a break, the final of_node_put(np)\ncorrectly drops the reference to the current node.\n\nHowever, if the loop terminates naturally because np == NULL, calling\nof_node_put(np) is a no-op. This leaves the last valid node stored in\nprev without its reference dropped, resulting in a node reference leak.\n\nFix this by changing the final `of_node_put(np)` to `of_node_put(prev)`."
    }
  ],
  "id": "CVE-2026-72179",
  "lastModified": "2026-08-17T06:18:18.393",
  "metrics": {},
  "published": "2026-08-15T06:21:36.180",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/2560c97f63bb99b26d9f19b23a4f66ea24c9dc14"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/36e4843fe39ea2f17f4de6d59fba26271916c184"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/51afb7da697b698996351740b4f39fb05ce2afd4"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/880ac50b0bfae06d7ab5f1843253adfb86aa173a"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/bf4a195f063b0a0805c1417f6aad1dd32ea48f0f"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/f322955d9a1c344ed943752f05aacea7bc22e025"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Received"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.