CVE-2026-72059: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure

Received
AliasesUBUNTU-CVE-2026-72059DEBIAN-CVE-2026-72059
Published 15-08-2026Last modified 17-08-2026

Vulnerability summary

CVE-2026-72059 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11.9% of scored vulnerabilities.

Priority
Insufficient evidence

No CVSS vector published; no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.21%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 9 · Related 9

Timeline

  1. 15-08-2026
    PublishedVulnerability first disclosed.
  2. 17-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xx_cldma_late_init() creates md_ctrl->gpd_dmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized rings but leaves the DMA pool allocated. Destroy md_ctrl->gpd_dmapool on the late-init failure path to avoid leaking the DMA pool.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.21% on 06-10-2026

06-10-202605-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: not stated in public data.

Ubuntu144 products
  • linuxAll versions (No fix recorded) | < 6.8.0-147.147 | < 7.0.0-38.38
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1067.70 | < 7.0.0-1014.14
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.180-1 | < 6.12.100-1 | < 7.1.5-1
Linux1 product
  • linux≥ 39d439047f1dc88f98b755d6f3a53a4ef8f0de21, < cef50f9f9045ff5e6a9d62c5110522df98fca645 | ≥ 39d439047f1dc88f98b755d6f3a53a4ef8f0de21, < fd01247bde1add970fae7f0003af085333a256e6 | ≥ 39d439047f1dc88f98b755d6f3a53a4ef8f0de21, < ebd84cb129fac7f7933628c40fccdfa8a62805de | ≥ 39d439047f1dc88f98b755d6f3a53a4ef8f0de21, < e89b8829693e65217d587dceeaad4826c96c731b | ≥ 39d439047f1dc88f98b755d6f3a53a4ef8f0de21, < 0c0a8c7821485f32bdb4923fb22f2dd501a27d8a | ≥ 39d439047f1dc88f98b755d6f3a53a4ef8f0de21, < 2bd6f26d4ce1e87de4d736b1e8896daf3acf1c0e | 5.19

3 vendors · 146 products

References

18 links
Show all 18 references