Answer in brief
CVE-2026-72058 records a Unknown severity vulnerability in net: ixp4xx_hss: fix duplicate HDLC netdev allocation. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <8f4c3c384092becbf4835a3f8ed8a3df1f544578 || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <fd0b939ebd1eee29945a539c5ed65c35dddac8d6 || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <ffba16e6f55948d94b7f16aa113d587c1c4c0643 || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <3f85fcd520aa703824b1958f35169925ddae2558 || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <91850f582783098415a334f8bd0a84c87ff15a8c || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <db818b0e8af7bac16860116a19c341a63d6677b4 | 8f4c3c384092becbf4835a3f8ed8a3df1f544578, fd0b939ebd1eee29945a539c5ed65c35dddac8d6, ffba16e6f55948d94b7f16aa113d587c1c4c0643, 3f85fcd520aa703824b1958f35169925ddae2558, 91850f582783098415a334f8bd0a84c87ff15a8c, db818b0e8af7bac16860116a19c341a63d6677b4 |
| Linux/Linuxgeneric | 5.14 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: net: ixp4xx_hss: fix duplicate HDLC netdev allocation ixp4xx_hss_probe() allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered with register_hdlc_device(). The second one is stored in port->netdev and later used by the remove path for unregister_hdlc_device() and free_netdev(). This means that the registered netdev is not the same object that is unregistered and freed on remove. It also leaks the first allocation if the second alloc_hdlcdev() call fails, and the first allocation is not checked before ndev is used. Older code allocated the HDLC netdev only once and stored the same object in both the local variable and port->netdev. The buggy conversion split this into two alloc_hdlcdev() calls. A later rename changed the local variable name to ndev, but the underlying mismatch remained. Fix this by allocating the HDLC netdev only once and assigning the same object to port->netdev.
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2026-72058 records a Unknown severity vulnerability in net: ixp4xx_hss: fix duplicate HDLC netdev allocation. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <8f4c3c384092becbf4835a3f8ed8a3df1f544578 || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <fd0b939ebd1eee29945a539c5ed65c35dddac8d6 || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <ffba16e6f55948d94b7f16aa113d587c1c4c0643 || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <3f85fcd520aa703824b1958f35169925ddae2558 || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <91850f582783098415a334f8bd0a84c87ff15a8c || >=99ebe65eb9c0ada015931d239d9f2d1dc8897fee <db818b0e8af7bac16860116a19c341a63d6677b4 | 8f4c3c384092becbf4835a3f8ed8a3df1f544578, fd0b939ebd1eee29945a539c5ed65c35dddac8d6, ffba16e6f55948d94b7f16aa113d587c1c4c0643, 3f85fcd520aa703824b1958f35169925ddae2558, 91850f582783098415a334f8bd0a84c87ff15a8c, db818b0e8af7bac16860116a19c341a63d6677b4 |
| Linux/Linuxgeneric | 5.14 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: net: ixp4xx_hss: fix duplicate HDLC netdev allocation ixp4xx_hss_probe() allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered with register_hdlc_device(). The second one is stored in port->netdev and later used by the remove path for unregister_hdlc_device() and free_netdev(). This means that the registered netdev is not the same object that is unregistered and freed on remove. It also leaks the first allocation if the second alloc_hdlcdev() call fails, and the first allocation is not checked before ndev is used. Older code allocated the HDLC netdev only once and stored the same object in both the local variable and port->netdev. The buggy conversion split this into two alloc_hdlcdev() calls. A later rename changed the local variable name to ndev, but the underlying mismatch remained. Fix this by allocating the HDLC netdev only once and assigning the same object to port->netdev.
Quoted source text, attributed separately from HOL analysis.