SB20260816310 - Improper control of a resource through its lifetime in Linux kernel asm dec

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260816310

SB20260816310 - Improper control of a resource through its lifetime in Linux kernel asm dec

Published: August 16, 2026

Security Bulletin ID SB20260816310
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper control of a resource through its lifetime (CVE-ID: CVE-2026-72215)

CWE-ID: CWE-664 - Improper control of a resource through its lifetime

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to incorrect stack handling in prom_printf() when calling 32-bit firmware code from a kernel thread in 64-bit MIPS configurations. A local user can trigger console output during system bootstrap to cause a denial of service.

The issue occurs when the initial console remains in use late into bootstrap, causing the kernel to hang before startup completes.


Remediation

Install update from vendor's website.

References