CVE-2026-72485

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the coresight platform where the coresight add out conn() function increments the nr outconns counter before calling devm krealloc array() and devm kmalloc(), and the coresight add in conn() function similarly increments nr inconns before calling devm krealloc array(). If these allocations fail, the counters are increased while the corresponding array entries remain NULL or uninitialized. Consequently, when the probe returns -ENOMEM, coresight get platform data() triggers coresight release platform data() for cleanup. This cleanup function iterates through the entries based on the counters and dereferences the pointers unconditionally, leading to a system panic instead of a graceful failure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.