Bug 2516485 (CVE-2026-72214) - CVE-2026-72214 kernel: power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
Summary: CVE-2026-72214 kernel: power: supply: cpcap-battery: Fix missing nvmem_device...
Keywords:
Status: NEW
Alias: CVE-2026-72214
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-15 06:15 UTC by OSIDB Bzimport
Modified: 2026-08-18 13:38 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-15 06:15:01 UTC
In the Linux kernel, the following vulnerability has been resolved:

power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak

In cpcap_battery_detect_battery_type(), the reference to an nvmem
device obtained via nvmem_device_find() is not released with
nvmem_device_put() on the success or read-failure paths, causing a
permanent reference leak. The driver’s retry logic on subsequent
battery property reads can compound this leak, preventing the nvmem
device from ever being freed.

Found by code review.


Note You need to log in before you can comment on or make changes to this bug.