In the Linux kernel, the following vulnerability has been resolved:

power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak

In cpcap_battery_detect_battery_type(), the reference to an nvmem
device obtained via nvmem_device_find() is not released with
nvmem_device_put() on the success or read-failure paths, causing a
permanent reference leak. The driver’s retry logic on subsequent
battery property reads can compound this leak, preventing the nvmem
device from ever being freed.

Found by code review.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00215.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
fd46821e85de90fb5b7356251164af4815b6e3f6 affected < fc65520fe0781a1ff46631f111e07b4a1c677b96
fd46821e85de90fb5b7356251164af4815b6e3f6 affected < 700c225d829a1256b59053c34a1a9d1a6ab70b09
fd46821e85de90fb5b7356251164af4815b6e3f6 affected < deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2
fd46821e85de90fb5b7356251164af4815b6e3f6 affected < a3d81de441233a92ec21469cd0c4eb3c26b95cd8
fd46821e85de90fb5b7356251164af4815b6e3f6 affected < b56a5cbf8f1f1a5740f1137c89b14d0373309d8d
fd46821e85de90fb5b7356251164af4815b6e3f6 affected < a2c14ff63e0e02e3c832385e523e9cc81301171c
Linux Linux affected
Version Status Constraints
5.18 affected —
0 unaffected < 5.18
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/700c225d829a1256b59053c34a1a9d1a6ab70b09 cve-icon cve-icon
https://git.kernel.org/stable/c/a2c14ff63e0e02e3c832385e523e9cc81301171c cve-icon cve-icon
https://git.kernel.org/stable/c/a3d81de441233a92ec21469cd0c4eb3c26b95cd8 cve-icon cve-icon
https://git.kernel.org/stable/c/b56a5cbf8f1f1a5740f1137c89b14d0373309d8d cve-icon cve-icon
https://git.kernel.org/stable/c/deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2 cve-icon cve-icon
https://git.kernel.org/stable/c/fc65520fe0781a1ff46631f111e07b4a1c677b96 cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak In cpcap_battery_detect_battery_type(), the reference to an nvmem device obtained via nvmem_device_find() is not released with nvmem_device_put() on the success or read-failure paths, causing a permanent reference leak. The driver’s retry logic on subsequent battery property reads can compound this leak, preventing the nvmem device from ever being freed. Found by code review.
Title power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:54:08.602Z

Reserved: 2026-08-09T03:40:39.912Z

Link: CVE-2026-72214

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:40.130

Modified: 2026-08-15T06:21:40.130

Link: CVE-2026-72214

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.