CVE-2026-72059 net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
A memory leak in the Linux kernel t7xx WWAN driver occurs when CLDMA initialization fails, potentially leading to resource exhaustion and denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-72059?
CVE-2026-72059 is a memory corruption vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
t7xx_cldma_late_init() creates md_ctrl->gpd_dmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized rings but leaves the DMA pool allocated.
Destroy md_ctrl->gpd_dmapool on the late-init failure path to avoid leaking the DMA pool.
Which versions are affected by CVE-2026-72059?
How do I fix CVE-2026-72059?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-72059 being exploited?
There is no known exploitation of CVE-2026-72059 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-72059, DEBIAN-CVE-2026-72059, GHSA-89xx-w2gg-gxc3, UBUNTU-CVE-2026-72059.