SB20260816306 - Memory leak in Linux kernel nvdimm driver
Published: August 16, 2026
Security Bulletin ID
SB20260816306
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Partial DoS
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Memory leak (CVE-ID: CVE-2026-72224)
CWE-ID: CWE-401 - Missing release of memory after effective lifetime
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to missing release of allocated memory in btt_init() in the nvdimm btt subsystem when handling BTT initialization failures. A local user can trigger an initialization failure to cause a denial of service.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/0b63788093ff6ccfffe6e87de9e08aeeb406599c
- https://git.kernel.org/stable/c/1a6b6442a982d0ca5fb6a1a39b6f6dfd760eda57
- https://git.kernel.org/stable/c/52a7e7ece79c4b0f406149e19cd2b4b11a6c19e4
- https://git.kernel.org/stable/c/5804e6a6912b5a1e47c821777d69191d69a3fe64
- https://git.kernel.org/stable/c/68c967e105d50f885e02b0dbdc9211fd5f84bdcd
- https://git.kernel.org/stable/c/7e49684d90faa34ff6d5586be658e986d9d475ac
- https://git.kernel.org/stable/c/9ab5293d9ac3f2c4232220e563d04701f5f44607
- https://git.kernel.org/stable/c/f4ca396bdd60b4e0a665b2589bfc4ddbea9bda2b