CVE-2026-72059

Received Received - Intake

Memory Leak in Linux Kernel t7xx Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xx_cldma_late_init() creates md_ctrl->gpd_dmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized rings but leaves the DMA pool allocated. Destroy md_ctrl->gpd_dmapool on the late-init failure path to avoid leaking the DMA pool.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72059

EUVD

EUVD-2026-59017

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the t7xx driver for WWAN devices. When initializing the TX and RX rings fails, the DMA pool created earlier is not properly destroyed, leading to a resource leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's t7xx driver for WWAN devices. Detection requires checking kernel logs for DMA pool leaks during t7xx_cldma_late_init failures. Monitor dmesg or journalctl for errors related to t7xx or DMA pool allocation failures.

Impact Analysis

The impact is primarily on system stability and resource usage. A leaked DMA pool could cause memory exhaustion over time, potentially leading to system crashes or degraded performance in affected devices using the t7xx driver.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves a memory leak in the Linux kernel's net/wwan/t7xx driver due to improper cleanup of a DMA pool during late initialization failure. There is no indication of data exposure, unauthorized access, or privacy implications that would impact regulatory compliance.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. If patching is not immediately possible, disable the t7xx driver or the affected WWAN device to prevent DMA pool leaks. Monitor system logs for related errors as a sign of exploitation.

Hi! I’m here to help you understand CVE-2026-72059. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70