CVE-2026-72224

nvdimm/btt: Free arenas on btt_init() error paths

N/A

Published: August 15, 2026 at 05:54 AM UTC

Updated: August 17, 2026 at 06:18 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt_init() error paths The arenas allocated by discover_arenas() or create_arenas() are not freed on some error paths in btt_init(). This leaks memory when BTT initialization fails. Call free_arenas() from the affected error paths to release the allocations. [ as: commit message and log edits ]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.2 ≤ v < 5.10.2614.2 ≤ v < 5.15.2124.2 ≤ v < 6.1.1784.2 ≤ v < 6.12.974.2 ≤ v < 6.18.404.2 ≤ v < 6.6.1454.2 ≤ v < 7.1.54.2 ≤ v < 7.24.25212e11fde4d40fa627668b4f2222d20db488f71

Vendor states this is fixed in 0b63788093ff6ccfffe6e87de9e08aeeb406599c (fixed)

Vendor states this is fixed in 1a6b6442a982d0ca5fb6a1a39b6f6dfd760eda57 (fixed)

Vendor states this is fixed in 52a7e7ece79c4b0f406149e19cd2b4b11a6c19e4 (fixed)

Vendor states this is fixed in 5804e6a6912b5a1e47c821777d69191d69a3fe64 (fixed)

Vendor states this is fixed in 68c967e105d50f885e02b0dbdc9211fd5f84bdcd (fixed)

Vendor states this is fixed in 7e49684d90faa34ff6d5586be658e986d9d475ac (fixed)

Vendor states this is fixed in 9ab5293d9ac3f2c4232220e563d04701f5f44607 (fixed)

Vendor states this is fixed in f4ca396bdd60b4e0a665b2589bfc4ddbea9bda2b (fixed)

Vendor states this is fixed in 4.2 (unaffected)

Vendor states this is fixed in 5.10.261 (unaffected)

Vendor states this is fixed in 5.15.212 (unaffected)

Vendor states this is fixed in 6.1.178 (unaffected)