CVE-2026-72214
Description
In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak In cpcap_battery_detect_battery_type(), the reference to an nvmem device obtained via nvmem_device_find() is not released with nvmem_device_put() on the success or read-failure paths, causing a permanent reference leak. The driver’s retry logic on subsequent battery property reads can compound this leak, preventing the nvmem device from ever being freed. Found by code review.
How to fix
- Linux Linuxfc65520fe0781a1ff46631f111e07b4a1c677b96, 700c225d829a1256b59053c34a1a9d1a6ab70b09, deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2, a3d81de441233a92ec21469cd0c4eb3c26b95cd8, b56a5cbf8f1f1a5740f1137c89b14d0373309d8d, a2c14ff63e0e02e3c832385e523e9cc81301171c or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < fc65520fe0781a1ff46631f111e07b4a1c677b96, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < 700c225d829a1256b59053c34a1a9d1a6ab70b09, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < a3d81de441233a92ec21469cd0c4eb3c26b95cd8, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < b56a5cbf8f1f1a5740f1137c89b14d0373309d8d, fd46821e85de90fb5b7356251164af4815b6e3f6 ≤ v < a2c14ff63e0e02e3c832385e523e9cc81301171c, 5.18 | fc65520fe0781a1ff46631f111e07b4a1c677b96, 700c225d829a1256b59053c34a1a9d1a6ab70b09, deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2, a3d81de441233a92ec21469cd0c4eb3c26b95cd8, b56a5cbf8f1f1a5740f1137c89b14d0373309d8d, a2c14ff63e0e02e3c832385e523e9cc81301171c |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.