CVE-2025-71272

In the Linux kernel, the following vulnerability has been resolved: most: core: fix resource leak in most_register_interface error paths The function most_register_interface() did not correctly release resources if it failed early (before registering the device). In these cases, it returned an error code immediately, leaking the memory allocated for the interface. Fix this by initializing the device early via device_initialize() and calling put_device() on all error paths. The most_register_interface() is expected to call put_device() on error which frees the resources allocated in the caller. The put_device() either calls release_mdev() or dim2_release(), depending on the caller. Switch to using device_add() instead of device_register() to handle the split initialization.

• CWE-401

• https://git.kernel.org/stable/c/1f4c9d8a1021281750c6cda126d6f8a40cc24e71Patch
• https://git.kernel.org/stable/c/2f483f3817fb0e4209ac5de928778b1da0cc8574Patch
• https://git.kernel.org/stable/c/a49028a796d7b94f8e3ab9bd34b18f36be235459Patch
• https://git.kernel.org/stable/c/af0b99b2214a10554adb5b868240d23af6e64e71Patch

Published

May 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-71267In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-71268In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-71269In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-7127A vulnerability, which was classified as critical, was found…7.2
• CVE-2025-71270In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-71271In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-71273In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-71274In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2025-71275Rejected reason: This CVE was rejected due to being a duplic…
• CVE-2025-71276SOGo before 5.12.5 is prone to a XSS vulnerability with even…6.1
• CVE-2025-71278XenForo before 2.3.5 allows OAuth2 client applications to re…8.8
• CVE-2025-71279XenForo before 2.3.7 contains a security issue affecting Pas…9.8