In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure… (CVE-2026-72059)
A vulnerability in the Linux kernel's net subsystem related to the wwan t7xx driver was resolved. The issue involved a failure to destroy a DMA pool on CLDMA late initialization failure, which could lead to a resource leak. Specifically, if ring initialization failed after the DMA pool was created, the error path did not free the DMA pool, causing a leak. This has been fixed by ensuring the DMA pool is destroyed on failure.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-72059 concerns the wwan t7xx driver where the function t7xx_cldma_late_init() creates a DMA pool (md_ctrl->gpd_dmapool) before initializing TX and RX rings. If ring initialization fails, the error handling frees the rings but neglects to free the DMA pool, resulting in a resource leak. The fix ensures that the DMA pool is destroyed on the late initialization failure path, preventing the leak.
Potential Impact
The vulnerability causes a resource leak of the DMA pool when initialization fails. While this does not directly lead to code execution or privilege escalation, resource leaks can degrade system stability or lead to denial of service conditions if exploited repeatedly.
Mitigation Recommendations
A fix has been applied to the Linux kernel to destroy the DMA pool on CLDMA late initialization failure. Users should update to a kernel version that includes this fix. Since no vendor advisory or patch link is provided, check the official Linux kernel repositories or distributions for the patch.
In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure… (CVE-2026-72059)
Description
A vulnerability in the Linux kernel's net subsystem related to the wwan t7xx driver was resolved. The issue involved a failure to destroy a DMA pool on CLDMA late initialization failure, which could lead to a resource leak. Specifically, if ring initialization failed after the DMA pool was created, the error path did not free the DMA pool, causing a leak. This has been fixed by ensuring the DMA pool is destroyed on failure.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-72059 concerns the wwan t7xx driver where the function t7xx_cldma_late_init() creates a DMA pool (md_ctrl->gpd_dmapool) before initializing TX and RX rings. If ring initialization fails, the error handling frees the rings but neglects to free the DMA pool, resulting in a resource leak. The fix ensures that the DMA pool is destroyed on the late initialization failure path, preventing the leak.
Potential Impact
The vulnerability causes a resource leak of the DMA pool when initialization fails. While this does not directly lead to code execution or privilege escalation, resource leaks can degrade system stability or lead to denial of service conditions if exploited repeatedly.
Mitigation Recommendations
A fix has been applied to the Linux kernel to destroy the DMA pool on CLDMA late initialization failure. Users should update to a kernel version that includes this fix. Since no vendor advisory or patch link is provided, check the official Linux kernel repositories or distributions for the patch.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-89xx-w2gg-gxc3
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72059"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a808b78bf8831d539501acc
Added to database: 08/15/2026, 15:53:28 UTC
Last enriched: 08/15/2026, 17:07:04 UTC
Last updated: 08/16/2026, 00:41:15 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.