CVE-2026-72140

Updated on 15 Aug 2026

Severity

Awaiting Analysis

Details

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()

If devm_platform_get_and_ioremap_resource() returns an error, mlxbf_i2c_init_resource() frees tmp_res before reading tmp_res->io to get the error code. This results in a use-after-free.

Save the error code before freeing tmp_res.

Details

Affected product:
Debian 10 ELS , Debian 11 ELS
Affected packages:
linux @ 5.10.259 (+1 more)

Fixes