CVE-2026-72167

Updated on 15 Aug 2026

Severity

Awaiting Analysis

Details

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

mtd: rawnand: pl353: fix probe resource allocation

During probe(), the devm_ioremap() is called with the parent device instead of the current one. So when the module is unloaded, the register area isn’t released.

Target the pl35x device in the devm_ioremap() instead of its parent.

Details

Affected product:
Debian 10 ELS
Affected packages:
linux @ 4.19.0

Fixes