CVE-2026-72258 ASoC: mediatek: mt8183: Release reserved memory on cleanup
A memory leak in the Linux kernel MT8183 audio driver can lead to resource exhaustion and denial of service upon repeated driver loading or unloading.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-72258?
CVE-2026-72258 is a memory corruption vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ASoC: mediatek: mt8183: Release reserved memory on cleanup
The MT8183 AFE probe can assign reserved memory with of_reserved_mem_device_init(), but the assignment is never released on driver removal or later probe failures.
Register a devm cleanup action so the reserved memory assignment is released consistently, matching newer Mediatek AFE drivers.
Which versions are affected by CVE-2026-72258?
How do I fix CVE-2026-72258?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-72258 being exploited?
There is no known exploitation of CVE-2026-72258 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-72258, DEBIAN-CVE-2026-72258, GHSA-x87g-g4xm-27f5, UBUNTU-CVE-2026-72258.