CVE-2026-72140
- Source
- https://cve.org/CVERecord?id=CVE-2026-72140
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72140.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-72140
- Downstream
- Published
- 2026-08-15T05:53:14Z
- Modified
- 2026-08-18T03:31:29Z
- Summary
- i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
If devm_platform_get_and_ioremap_resource() returns an error, mlxbf_i2c_init_resource() frees tmp_res before reading tmp_res->io to get the error code. This results in a use-after-free.
Save the error code before freeing tmp_res.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72140.json" }- References
-
- https://git.kernel.org/stable/c/5290a52533e09c38374963f4bb0b35121fe555c7
- https://git.kernel.org/stable/c/6a108c9f5a81bb7b29dbb1398be0089655b6bfd2
- https://git.kernel.org/stable/c/71356737a7a55c76fee847563e3d33f8e6dc6b6d
- https://git.kernel.org/stable/c/b398cbbbb9dd76210682a8c9aabd34c5168800b9
- https://git.kernel.org/stable/c/c4d9b6a0c9645366d9e4af8a6ac8347bd4c841aa
- https://git.kernel.org/stable/c/ce960a1b2caa4ad08291f28d8bcf17ad5a864e54
- https://git.kernel.org/stable/c/e6a395a71f4652261d09b572a03c96052662a056
- https://git.kernel.org/stable/c/fb267770bf822064f510c9b46743f533d8fa8a5f
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72140.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-72140
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedb5b5b32081cd206baa6e58cca7f112d9723785d6Fixed6a108c9f5a81bb7b29dbb1398be0089655b6bfd2Fixedc4d9b6a0c9645366d9e4af8a6ac8347bd4c841aaFixedb398cbbbb9dd76210682a8c9aabd34c5168800b9Fixed5290a52533e09c38374963f4bb0b35121fe555c7Fixedce960a1b2caa4ad08291f28d8bcf17ad5a864e54Fixede6a395a71f4652261d09b572a03c96052662a056Fixedfb267770bf822064f510c9b46743f533d8fa8a5fFixed71356737a7a55c76fee847563e3d33f8e6dc6b6d
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced5.10.0Fixed5.10.261
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.212
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.178
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.145
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.97
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.40
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.1.5