SB20260816114 - Improper Check or Handling of Exceptional Conditions in Linux kernel mediatek mt8192

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-72260)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper exception handling in mt8192_afe_pcm_dev_probe() when probing the MT8192 AFE device and reinitializing the regmap cache during runtime power management resume. A local user can trigger device probe under conditions where runtime resume fails to cause a denial of service.

The issue can leave the power management usage count incremented and continue probe while the device may not be accessible.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/6e2ee6eacc3ec7b339753abcf33812d27e03efe5
• https://git.kernel.org/stable/c/e0f276f1918a202e9c3ac72baffd311cecb6b8db
• https://git.kernel.org/stable/c/e24d5dde56a50946020b134fa8448869093db76a
• https://git.kernel.org/stable/c/f6e424835cc05d215c57b6370b2c1e353dd02915
• https://git.kernel.org/stable/c/faa97a1a6cab01cd3e2055deb4db4e57efc43ff2