Strix
57K

CVE-2026-72179

UnknownEPSS 0.21%

Last modified

CVE-2026-72179 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of_node_put(np) correctly drops the reference to the current node. However, if the loop terminates naturally because np == NULL, calling of_node_put(np) is a no-op. This leaves the last valid node stored in prev without its reference dropped, resulting in a node reference leak. Fix this by changing the final `of_node_put(np)` to `of_node_put(prev)`.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of_node_put(np) correctly drops the reference to the current node. However, if the loop terminates naturally because np == NULL, calling of_node_put(np) is a no-op. This leaves the last valid node stored in prev without its reference dropped, resulting in a node reference leak. Fix this by changing the final `of_node_put(np)` to `of_node_put(prev)`.

Metrics

EPSS Probability
0.21%

11.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f, < 2560c97f63bb99b26d9f19b23a4f66ea24c9dc14; >= 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f, < 51afb7da697b698996351740b4f39fb05ce2afd4; >= 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f, < 880ac50b0bfae06d7ab5f1843253adfb86aa173a; >= 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f, < f322955d9a1c344ed943752f05aacea7bc22e025; >= 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f, < 36e4843fe39ea2f17f4de6d59fba26271916c184; >= 94f9bf118f1e294b3f2092f8bde02860f5e3ea3f, < bf4a195f063b0a0805c1417f6aad1dd32ea48f0f
LinuxLinux5.0

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72179?
In the Linux kernel, the following vulnerability has been resolved: riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Currently, the while loop drops the reference to prev in each iteration. If the loop terminates early due to a break, the final of_node_put(np) correctly drops the reference to the current node. However, if the loop terminates naturally because np == NULL, calling of_node_put(np) is a no-op. This leaves the last valid node stored in prev without its reference dropped, resulting in a node reference leak. Fix this by changing the final `of_node_put(np)` to `of_node_put(prev)`.
How severe is CVE-2026-72179?
Severity scoring for CVE-2026-72179 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72179?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72179?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST