In the Linux kernel, the following vulnerability has been resolved:

nvdimm/btt: Free arena sub-allocations on discover_arenas() error path

Memory allocated by btt_freelist_init(), btt_rtt_init(), and
btt_maplocks_init() is not freed on some discover_arenas() error
paths. This leaks memory when arena discovery fails.

Add the missing kfree() calls to release the allocations before
returning an error.

[ as: commit message and log edits ]

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
5212e11fde4d40fa627668b4f2222d20db488f71 affected < 2d0364937550a7b3e2592629c2a68753ac020b28
5212e11fde4d40fa627668b4f2222d20db488f71 affected < eeb95774bc79268e2b78ebf01d8781560b5bd671
5212e11fde4d40fa627668b4f2222d20db488f71 affected < 7563f69caa9143a491d5f26e563255c734751545
5212e11fde4d40fa627668b4f2222d20db488f71 affected < 0b0d9404951aacc9717aa61e77af4a6e9e8f8249
5212e11fde4d40fa627668b4f2222d20db488f71 affected < 873ced7f345e99f7ee16f9ff226515580332ecc4
5212e11fde4d40fa627668b4f2222d20db488f71 affected < 30d490bb2c4cd220e7dedf862ab6a09eb5dcbad5
5212e11fde4d40fa627668b4f2222d20db488f71 affected < ba59b96d8d21dc8729fca44a022ca5919c1848c9
5212e11fde4d40fa627668b4f2222d20db488f71 affected < 13fe4cd9ddd0aacb7777812328be525a11ea3fea
Linux Linux affected
Version Status Constraints
4.2 affected —
0 unaffected < 4.2
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0b0d9404951aacc9717aa61e77af4a6e9e8f8249 cve-icon cve-icon
https://git.kernel.org/stable/c/13fe4cd9ddd0aacb7777812328be525a11ea3fea cve-icon cve-icon
https://git.kernel.org/stable/c/2d0364937550a7b3e2592629c2a68753ac020b28 cve-icon cve-icon
https://git.kernel.org/stable/c/30d490bb2c4cd220e7dedf862ab6a09eb5dcbad5 cve-icon cve-icon
https://git.kernel.org/stable/c/7563f69caa9143a491d5f26e563255c734751545 cve-icon cve-icon
https://git.kernel.org/stable/c/873ced7f345e99f7ee16f9ff226515580332ecc4 cve-icon cve-icon
https://git.kernel.org/stable/c/ba59b96d8d21dc8729fca44a022ca5919c1848c9 cve-icon cve-icon
https://git.kernel.org/stable/c/eeb95774bc79268e2b78ebf01d8781560b5bd671 cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Memory allocated by btt_freelist_init(), btt_rtt_init(), and btt_maplocks_init() is not freed on some discover_arenas() error paths. This leaks memory when arena discovery fails. Add the missing kfree() calls to release the allocations before returning an error. [ as: commit message and log edits ]
Title nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:54:16.019Z

Reserved: 2026-08-09T03:40:39.913Z

Link: CVE-2026-72223

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:41.233

Modified: 2026-08-15T06:21:41.233

Link: CVE-2026-72223

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.