Description
In the Linux kernel, the following vulnerability has been resolved:

net: wwan: t7xx: destroy DMA pool on CLDMA late init failure

t7xx_cldma_late_init() creates md_ctrl->gpd_dmapool before
initializing the TX and RX rings. If any ring initialization
fails, the error path frees the already initialized rings but
leaves the DMA pool allocated.

Destroy md_ctrl->gpd_dmapool on the late-init failure path
to avoid leaking the DMA pool.
Published: 2026-08-15
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

During late initialization of the t7xx CLDMA driver, a DMA pool is allocated before the transmit and receive rings are set up. If initialization of any ring fails, the error path releases the rings but forgets to release the DMA pool, causing a memory leak. This flaw can accumulate unreleased DMA buffers, eventually exhausting system memory and degrading or halting kernel operation.

Affected Systems

The issue exists in the Linux kernel wherever the t7xx wireless driver is compiled and loaded. All current Linux distributions running kernel versions prior to the fix are impacted; no additional vendor or product name was supplied, and version information is not available.

Risk and Exploitability

The vulnerability is a kernel‑level resource leak that can be triggered by a failure in the driver’s late‑initialization routine. Based on the description, it is inferred that an attacker with local privileges could repeatedly exercise this failure path and force the kernel to allocate unreleased DMA pools, potentially exhausting memory. The EPSS score is < 1% and the CVE is not listed in CISA KEV, indicating no known exploits at this time. The CVSS score of 5.5 reflects a medium severity. Nonetheless, the potential for memory exhaustion suggests a high risk if the flaw can be repeatedly triggered.

Generated by OpenCVE AI on August 18, 2026 at 05:47 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Deploy the latest stable Linux kernel that includes the fix for the t7xx CLDMA late‑init bug.
  • After upgrading, ensure the affected kernel modules are reloaded and that the driver’s initialization completes successfully.
  • After the upgrade, monitor system memory and DMA usage for signs of abnormal retention, confirming that the DMA pool is released on initialization failure.

Generated by OpenCVE AI on August 18, 2026 at 05:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 18 Aug 2026 04:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Tue, 18 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low


Sat, 15 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xx_cldma_late_init() creates md_ctrl->gpd_dmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized rings but leaves the DMA pool allocated. Destroy md_ctrl->gpd_dmapool on the late-init failure path to avoid leaking the DMA pool.
Title net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-17T05:07:26.131Z

Reserved: 2026-08-09T03:40:39.903Z

Link: CVE-2026-72059

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:15.400

Modified: 2026-08-17T06:18:04.270

Link: CVE-2026-72059

cve-icon Redhat

Severity : Low

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72059 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-18T06:00:04Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime