CVE-2026-72453

Received Received - Intake

Linux Kernel regcache Error Code Overwrite Vulnerability

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cache_ops->populate callback, and if cache operations include an exit callback, the error code from populate() is overwritten with the return value from exit(). This hides the error condition from the caller of regcache_init(), and can cause NULL pointer dereferences when the regcache is later accessed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72453

EUVD

EUVD-2026-59352

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel occurs during regcache initialization. If an error happens in the cache_ops->populate callback and cache operations include an exit callback, the original error code is overwritten by the exit() return value. This hides the initial error from regcache_init() and may lead to NULL pointer dereferences later when accessing the regcache.

Detection Guidance

This vulnerability is specific to the Linux kernel's regcache component and requires kernel-level inspection. Detection involves checking kernel logs for regcache initialization errors or NULL pointer dereference warnings during system boot or driver loading. Use dmesg | grep -i regcache or journalctl -k | grep -i regcache to search for related errors.

Impact Analysis

This vulnerability could cause system instability or crashes due to NULL pointer dereferences when the regcache is accessed after an initialization error was hidden. It may lead to unexpected behavior or denial of service in affected systems.

Compliance Impact

The vulnerability involves error code overwriting during regcache initialization in the Linux kernel, which can lead to NULL pointer dereferences. This may cause system instability or crashes, potentially disrupting data processing or security controls required for compliance with standards like GDPR or HIPAA.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for regcache initialization errors, especially during driver or subsystem initialization. Ensure all kernel modules are updated to versions compatible with the patched kernel.

Hi! I’m here to help you understand CVE-2026-72453. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70