{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-72171",
  "modified": "2026-10-07T17:22:01Z",
  "upstream": [
    "CVE-2026-72171"
  ],
  "published": "2026-08-15T06:04:33Z",
  "summary": "mtd: slram: remove failed entries from the device list",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: slram: remove failed entries from the device list\n\nregister_device() links a new slram_mtdlist entry before allocating all\nof the state needed by the entry. If a later allocation, memremap(), or\nmtd_device_register() fails, the partially initialized entry remains on\nthe global list. A later cleanup can then dereference or free invalid\nstate from that failed entry.\n\nUnwind the partially initialized entry and clear the list tail on each\nfailure path after the entry has been linked.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:12",
        "name": "linux"
      },
      "versions": [
        "1:6.1.47-1+rpt4"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-2712",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v6",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7l",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v8",
            "binary_version": "1:6.1.47-1+rpt4"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.1.47-1+rpt4": {
            "linux_commit": "655fc658a15ae7a6f37103754adb39ba52a9a14e",
            "upstream_version": "6.1.47",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.1.178",
            "compiled_filter": false
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-72171"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/9ee674ab10f755bbedbcbb8e76745d2bb8de88d1"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/e97415b8254d9cc131b7bb1c80fcf38123269b9a"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/f40acf577bb0fb0829f285ecfeb27d817840601c"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/200b8bc5b6065b02f3775cf131f14b8e1156a00a"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/2fd0cbbb34447ccddab67a2a638a07c6d94cae7a"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/d8dcbbfa0d695a5244059aa34a2e81f3e8df1082"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/bdcdfc2464659789032edfad15ff5f7a166f5d7b"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/36f1648644d769c496a8e47e53603e863e358d73"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-08-17T05:50:24Z"
  }
}