CVE-2026-72214

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak In cpcap_battery_detect_battery_type(), the reference to an nvmem device obtained via nvmem_device_find() is not released with nvmem_device_put() on the success or read-failure paths, causing a permanent reference leak. The driver’s retry logic on subsequent battery property reads can compound this leak, preventing the nvmem device from ever being freed. Found by code review.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linuxfc65520fe0781a1ff46631f111e07b4a1c677b96, 700c225d829a1256b59053c34a1a9d1a6ab70b09, deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2, a3d81de441233a92ec21469cd0c4eb3c26b95cd8, b56a5cbf8f1f1a5740f1137c89b14d0373309d8d, a2c14ff63e0e02e3c832385e523e9cc81301171c or later

Affected products

ProductAffected versionsFixed in
Linux Linuxfd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < fc65520fe0781a1ff46631f111e07b4a1c677b96, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < 700c225d829a1256b59053c34a1a9d1a6ab70b09, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < a3d81de441233a92ec21469cd0c4eb3c26b95cd8, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < b56a5cbf8f1f1a5740f1137c89b14d0373309d8d, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < a2c14ff63e0e02e3c832385e523e9cc81301171c, 5.18fc65520fe0781a1ff46631f111e07b4a1c677b96, 700c225d829a1256b59053c34a1a9d1a6ab70b09, deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2, a3d81de441233a92ec21469cd0c4eb3c26b95cd8, b56a5cbf8f1f1a5740f1137c89b14d0373309d8d, a2c14ff63e0e02e3c832385e523e9cc81301171c

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.