In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe(), the… (CVE-2026-72167)
A vulnerability in the Linux kernel's mtd: rawnand: pl353 driver was resolved by correcting resource allocation during the probe() function. The issue involved devm_ioremap() being called with the parent device instead of the current device, causing the register area to not be released when the module is unloaded. The fix targets the pl35x device directly in devm_ioremap().
AI Analysis
Technical Summary
This vulnerability in the Linux kernel affects the mtd: rawnand: pl353 driver. During the probe() process, devm_ioremap() was incorrectly called with the parent device rather than the current device, leading to the register area not being released upon module unload. The resolution involves changing the devm_ioremap() call to target the pl35x device directly, ensuring proper resource release.
Potential Impact
The improper resource allocation could lead to resource leakage when the module is unloaded. There is no indication of direct security impact such as privilege escalation or code execution. No known exploits are reported in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by correcting the device targeted in devm_ioremap() during probe(). Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed; check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe(), the… (CVE-2026-72167)
Description
A vulnerability in the Linux kernel's mtd: rawnand: pl353 driver was resolved by correcting resource allocation during the probe() function. The issue involved devm_ioremap() being called with the parent device instead of the current device, causing the register area to not be released when the module is unloaded. The fix targets the pl35x device directly in devm_ioremap().
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in the Linux kernel affects the mtd: rawnand: pl353 driver. During the probe() process, devm_ioremap() was incorrectly called with the parent device rather than the current device, leading to the register area not being released upon module unload. The resolution involves changing the devm_ioremap() call to target the pl35x device directly, ensuring proper resource release.
Potential Impact
The improper resource allocation could lead to resource leakage when the module is unloaded. There is no indication of direct security impact such as privilege escalation or code execution. No known exploits are reported in the wild.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by correcting the device targeted in devm_ioremap() during probe(). Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed; check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-88qc-f788-cjrv
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72167"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b75bf8831d5394ff4db
Added to database: 08/15/2026, 15:53:25 UTC
Last enriched: 08/15/2026, 16:53:50 UTC
Last updated: 08/15/2026, 21:21:17 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.