In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in mem_write() In mem_write(), the… (CVE-2026-72145)
A vulnerability in the Linux kernel's platform/x86/intel/tpmi component was resolved by ensuring proper cleanup of a temporary array in the mem_write() function. The fix involved using scope-based cleanup helpers to automatically free the array returned by parse_int_array_user() on all exit paths, preventing potential resource leaks.
AI Analysis
Technical Summary
The Linux kernel had a vulnerability in the mem_write() function within platform/x86/intel/tpmi where a temporary array returned by parse_int_array_user() was not reliably released on all exit paths. This could lead to resource management issues. The patch converted the array variable to use cleanup.h scope-based cleanup, ensuring automatic freeing of the array on function return, and moved the array declaration next to the parse_int_array_user() call as per cleanup.h guidelines.
Potential Impact
The vulnerability could cause improper resource cleanup in the kernel, potentially leading to memory leaks or instability. No direct exploitation or active attacks are reported. The impact is limited to resource management within the kernel component.
Mitigation Recommendations
A fix has been applied in the Linux kernel source code to use scope-based cleanup helpers for the temporary array in mem_write(). Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: platform/x86/intel/tpmi: use cleanup helpers in mem_write() In mem_write(), the… (CVE-2026-72145)
Description
A vulnerability in the Linux kernel's platform/x86/intel/tpmi component was resolved by ensuring proper cleanup of a temporary array in the mem_write() function. The fix involved using scope-based cleanup helpers to automatically free the array returned by parse_int_array_user() on all exit paths, preventing potential resource leaks.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel had a vulnerability in the mem_write() function within platform/x86/intel/tpmi where a temporary array returned by parse_int_array_user() was not reliably released on all exit paths. This could lead to resource management issues. The patch converted the array variable to use cleanup.h scope-based cleanup, ensuring automatic freeing of the array on function return, and moved the array declaration next to the parse_int_array_user() call as per cleanup.h guidelines.
Potential Impact
The vulnerability could cause improper resource cleanup in the kernel, potentially leading to memory leaks or instability. No direct exploitation or active attacks are reported. The impact is limited to resource management within the kernel component.
Mitigation Recommendations
A fix has been applied in the Linux kernel source code to use scope-based cleanup helpers for the temporary array in mem_write(). Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2c28-ww74-c34h
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72145"]
Threat ID: 6a808b76bf8831d53950011c
Added to database: 08/15/2026, 15:53:26 UTC
Last enriched: 08/15/2026, 16:57:50 UTC
Last updated: 09/30/2026, 06:54:40 UTC
Views: 27
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.