Not yet scoredPublished Aug 15, 2026

CVE-2026-72059net: wwan: t7xx: destroy DMA pool on CLDMA late init failure

Updated under an hour ago (Oct 26, 2026, 1:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xx_cldma_late_init() creates md_ctrl->gpd_dmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized rings but leaves the DMA pool allocated. Destroy md_ctrl->gpd_dmapool on the late-init failure path to avoid leaking the DMA pool.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 before cef50f9f9045ff5e6a9d62c5110522df98fca645; from 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 before fd01247bde1add970fae7f0003af085333a256e6; from 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 before ebd84cb129fac7f7933628c40fccdfa8a62805de; from 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 before e89b8829693e65217d587dceeaad4826c96c731b; 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 builds before 0c0a8c7821485f32bdb4923fb22f2dd501a27d8a; 39d439047f1dc88f98b755d6f3a53a4ef8f0de21 builds before 2bd6f26d4ce1e87de4d736b1e8896daf3acf1c0e	CNA record

References

References

https://git.kernel.org/stable/c/cef50f9f9045ff5e6a9d62c5110522df98fca645
https://git.kernel.org/stable/c/fd01247bde1add970fae7f0003af085333a256e6
https://git.kernel.org/stable/c/ebd84cb129fac7f7933628c40fccdfa8a62805de
https://git.kernel.org/stable/c/e89b8829693e65217d587dceeaad4826c96c731b
https://git.kernel.org/stable/c/0c0a8c7821485f32bdb4923fb22f2dd501a27d8a
https://git.kernel.org/stable/c/2bd6f26d4ce1e87de4d736b1e8896daf3acf1c0e

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.