In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: pl353: fix probe resource allocation During probe(), the devm_ioremap() is called with the parent device instead of the current one. So when the module is unloaded, the register area isn't released. Target the pl35x device in the devm_ioremap() instead of its parent.

A flaw was found in the `mtd: rawnand: pl353` component of the Linux kernel. During the probe function, the `devm_ioremap()` call incorrectly uses the parent device instead of the `pl35x` device for resource allocation. This oversight prevents the register area from being properly released when the module is unloaded. A local attacker could potentially exploit this to cause a resource leak, leading to a denial of service (DoS) over time.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-72167 https://nvd.nist.gov/vuln/detail/CVE-2026-72167 https://lore.kernel.org/linux-cve-announce/2026081537-CVE-2026-72167-d8b6@gregkh/T