{"id":"CVE-2026-72171","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-72171","summary":"mtd: slram: remove failed entries from the device list","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: slram: remove failed entries from the device list\n\nregister_device() links a new slram_mtdlist entry before allocating all\nof the state needed by the entry. If a later allocation, memremap(), or\nmtd_device_register() fails, the partially initialized entry remains on\nthe global list. A later cleanup can then dereference or free invalid\nstate from that failed entry.\n\nUnwind the partially initialized entry and clear the list tail on each\nfailure path after the entry has been linked.","published":"2026-08-15T05:53:37.070Z","modified":"2026-08-16T03:48:33.986500919Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Linux","name":"Kernel","fixedVersion":"5.10.261"}],"fix":null,"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/200b8bc5b6065b02f3775cf131f14b8e1156a00a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2fd0cbbb34447ccddab67a2a638a07c6d94cae7a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/36f1648644d769c496a8e47e53603e863e358d73"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9ee674ab10f755bbedbcbb8e76745d2bb8de88d1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/bdcdfc2464659789032edfad15ff5f7a166f5d7b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d8dcbbfa0d695a5244059aa34a2e81f3e8df1082"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e97415b8254d9cc131b7bb1c80fcf38123269b9a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f40acf577bb0fb0829f285ecfeb27d817840601c"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72171.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72171"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-16T03:48:33.986500919Z"}}