Bug 2516578 (CVE-2026-72258)

Summary:	CVE-2026-72258 kernel: ASoC: mediatek: mt8183: Release reserved memory on cleanup
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	rhel-process-autobot, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the Linux kernel's Advanced Linux Sound Architecture System on Chip (ASoC) Mediatek MT8183 audio driver. The Audio Front End (AFE) probe assigns reserved memory but does not release it when the driver is removed or if probe failures occur. This oversight can lead to a memory leak, potentially causing resource exhaustion and a Denial of Service (DoS) for the system.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-08-15 06:19:53 UTC

In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: mt8183: Release reserved memory on cleanup

The MT8183 AFE probe can assign reserved memory with
of_reserved_mem_device_init(), but the assignment is never released on
driver removal or later probe failures.

Register a devm cleanup action so the reserved memory assignment is
released consistently, matching newer Mediatek AFE drivers.

Comment 1 Keith Grant 2026-08-18 17:59:56 UTC

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026081554-CVE-2026-72258-538c@gregkh/T