CVE-2026-72109

high

Description

In the Linux kernel, the following vulnerability has been resolved: net: sparx5: unregister blocking notifier on init failure sparx5_register_notifier_blocks() registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregisters the switchdev and netdevice notifiers, but leaves the blocking notifier registered. Add a separate error label for the workqueue allocation failure path and unregister the switchdev blocking notifier there.

References

https://git.kernel.org/stable/c/fbc65b17508ed5464b7106e7fa5f15251ca1b603

https://git.kernel.org/stable/c/e5afc6d3fabdf1f605d63c4b34a3df6c359e81f3

https://git.kernel.org/stable/c/d6084c47389fd6978a5d66b0d58206a548c792a9

https://git.kernel.org/stable/c/cf419c869e0d03aad4b6f4ecf0a813851930dfe7

https://git.kernel.org/stable/c/8a3c44a003176282ee4306b7c96e5a536c6f0707

https://git.kernel.org/stable/c/483be61b4a9a6df3b7cb277e8f189e082dee4cb8

https://git.kernel.org/stable/c/17f113e7b622dc850992ade540181717de6a8561

Details

Source: Mitre, NVD

Published: 2026-08-15

Updated: 2026-08-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00215