CVE-2026-72109

net: sparx5: unregister blocking notifier on init failure

HIGH
7.8
CVSS Score
Published: August 15, 2026 at 05:52 AM UTC
Updated: August 17, 2026 at 06:18 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.8
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5_register_notifier_blocks() registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregisters the switchdev and netdevice notifiers, but leaves the blocking notifier registered. Add a separate error label for the workqueue allocation failure path and unregister the switchdev blocking notifier there.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.14 ≤ v < 5.15.2125.14 ≤ v < 6.1.1785.14 ≤ v < 6.12.975.14 ≤ v < 6.18.405.14 ≤ v < 6.6.1455.14 ≤ v < 7.1.55.14 ≤ v < 7.25.14d6fce5141929697a27f029c633433d487f6f62cb
Vendor states this is fixed in 17f113e7b622dc850992ade540181717de6a8561 (fixed)
Vendor states this is fixed in 483be61b4a9a6df3b7cb277e8f189e082dee4cb8 (fixed)
Vendor states this is fixed in 8a3c44a003176282ee4306b7c96e5a536c6f0707 (fixed)
Vendor states this is fixed in cf419c869e0d03aad4b6f4ecf0a813851930dfe7 (fixed)
Vendor states this is fixed in d6084c47389fd6978a5d66b0d58206a548c792a9 (fixed)
Vendor states this is fixed in e5afc6d3fabdf1f605d63c4b34a3df6c359e81f3 (fixed)
Vendor states this is fixed in fbc65b17508ed5464b7106e7fa5f15251ca1b603 (fixed)
Vendor states this is fixed in 5.14 (unaffected)
Vendor states this is fixed in 5.15.212 (unaffected)
Vendor states this is fixed in 6.1.178 (unaffected)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

CVSS

7.8HIGHLinux
Vector?

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card