Description
In the Linux kernel, the following vulnerability has been resolved:

ASoC: mediatek: mt8192: Release reserved memory on cleanup

The MT8192 AFE probe calls of_reserved_mem_device_init() and falls
back to preallocated buffers when no reserved memory region is
available. When the reserved memory assignment succeeds, however, the
driver never releases it.

Register a devm cleanup action after a successful reserved-memory
assignment so the assignment is released on probe failure and driver
unbind.
Published: 2026-08-15
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The MT8192 audio firmware driver in the Linux kernel fails to release reserved memory when the probe fails or when the driver is unbound. The unreleased memory can accumulate and exhaust kernel space, potentially preventing allocation of new buffers. This resource exhaustion can lead to system instability or denial of service.

Affected Systems

The flaw is present in the Linux kernel's Media Audio Subsystem (ASoC) driver for Mediatek MT8192. It affects any kernel build containing the mediatek mt8192 AFE probe; no specific kernel versions are listed, so the vulnerability applies until the fix is applied.

Risk and Exploitability

The EPSS score is < 1% and the CVSS score is 5.5, and the KEV database does not list this CVE, indicating no known exploited instances. The attack likely requires local or kernel-level privilege to load or probe the media driver, which suggests a local attacker could trigger repeated probe failures and consume memory. In the absence of a known exploit, the risk is principally the potential for a denial‑of‑service condition if memory becomes exhausted.

Generated by OpenCVE AI on August 18, 2026 at 04:28 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that includes the fix for the MT8192 AFE probe memory release bug.
  • Reboot the system to ensure the updated driver is loaded and the memory is released.
  • If an immediate kernel upgrade is not possible, monitor memory consumption related to the MT8192 driver and consider temporarily disabling or unloading the mediatek mt8192 module to prevent further memory leakage.

Generated by OpenCVE AI on August 18, 2026 at 04:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 18 Aug 2026 03:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Tue, 18 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Sat, 15 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-401

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8192: Release reserved memory on cleanup The MT8192 AFE probe calls of_reserved_mem_device_init() and falls back to preallocated buffers when no reserved memory region is available. When the reserved memory assignment succeeds, however, the driver never releases it. Register a devm cleanup action after a successful reserved-memory assignment so the assignment is released on probe failure and driver unbind.
Title ASoC: mediatek: mt8192: Release reserved memory on cleanup
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-17T05:11:17.946Z

Reserved: 2026-08-09T03:40:39.915Z

Link: CVE-2026-72259

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:53.907

Modified: 2026-08-17T06:18:28.250

Link: CVE-2026-72259

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72259 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-18T04:30:06Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime