CVE-2026-72258

Received Received - Intake

Memory Leak in Linux Kernel ASoC MT8183 AFE Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8183: Release reserved memory on cleanup The MT8183 AFE probe can assign reserved memory with of_reserved_mem_device_init(), but the assignment is never released on driver removal or later probe failures. Register a devm cleanup action so the reserved memory assignment is released consistently, matching newer Mediatek AFE drivers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72258

EUVD

EUVD-2026-59157

Affected Vendors & Products

Vendor	Product	Version / Range
mediatek	mt8183	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's ASoC driver for the Mediatek MT8183 chipset. The issue occurs when the driver assigns reserved memory during initialization but fails to release it when the driver is removed or during probe failures. This can lead to memory leaks.

Detection Guidance

This vulnerability is specific to the Linux kernel's ASoC subsystem for Mediatek MT8183 hardware. Detection requires checking kernel logs for memory leaks related to the AFE probe or reserved memory issues during driver initialization or cleanup. No direct network detection commands are applicable.

Impact Analysis

This vulnerability may cause memory leaks in systems using the MT8183 AFE driver. Over time, this could lead to degraded system performance or unexpected crashes due to exhausted memory resources.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it involves a memory management issue in the Linux kernel's ASoC subsystem for Mediatek MT8183 hardware. There is no evidence of data exposure, unauthorized access, or privacy violations associated with this flaw.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for this issue. Monitor kernel logs for AFE probe failures or memory leaks related to the MT8183 driver. Ensure no custom kernel modules are interfering with the Mediatek AFE driver.

Hi! I’m here to help you understand CVE-2026-72258. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70