CVE-2026-72179

Source
https://cve.org/CVERecord?id=CVE-2026-72179
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72179.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72179
Downstream
Published
2026-08-15T05:53:42.980Z
Modified
2026-08-18T03:31:17.265000681Z
Summary
riscv: cacheinfo: Fix node reference leak in populate_cache_leaves
Details

In the Linux kernel, the following vulnerability has been resolved:

riscv: cacheinfo: Fix node reference leak in populatecacheleaves

Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final ofnodeput(np) correctly drops the reference to the current node.

However, if the loop terminates naturally because np == NULL, calling ofnodeput(np) is a no-op. This leaves the last valid node stored in prev without its reference dropped, resulting in a node reference leak.

Fix this by changing the final of_node_put(np) to of_node_put(prev).

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72179.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
94f9bf118f1e294b3f2092f8bde02860f5e3ea3f
Fixed
2560c97f63bb99b26d9f19b23a4f66ea24c9dc14
Fixed
51afb7da697b698996351740b4f39fb05ce2afd4
Fixed
880ac50b0bfae06d7ab5f1843253adfb86aa173a
Fixed
f322955d9a1c344ed943752f05aacea7bc22e025
Fixed
36e4843fe39ea2f17f4de6d59fba26271916c184
Fixed
bf4a195f063b0a0805c1417f6aad1dd32ea48f0f

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72179.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.0.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72179.json"