Answer in brief
CVE-2026-72223 records a Unknown severity vulnerability in nvdimm/btt: Free arena sub-allocations on discover_arenas() error path. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-72223 records a Unknown severity vulnerability in nvdimm/btt: Free arena sub-allocations on discover_arenas() error path. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5212e11fde4d40fa627668b4f2222d20db488f71 <2d0364937550a7b3e2592629c2a68753ac020b28 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <eeb95774bc79268e2b78ebf01d8781560b5bd671 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <7563f69caa9143a491d5f26e563255c734751545 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <0b0d9404951aacc9717aa61e77af4a6e9e8f8249 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <873ced7f345e99f7ee16f9ff226515580332ecc4 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <30d490bb2c4cd220e7dedf862ab6a09eb5dcbad5 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <ba59b96d8d21dc8729fca44a022ca5919c1848c9 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <13fe4cd9ddd0aacb7777812328be525a11ea3fea | 2d0364937550a7b3e2592629c2a68753ac020b28, eeb95774bc79268e2b78ebf01d8781560b5bd671, 7563f69caa9143a491d5f26e563255c734751545, 0b0d9404951aacc9717aa61e77af4a6e9e8f8249, 873ced7f345e99f7ee16f9ff226515580332ecc4, 30d490bb2c4cd220e7dedf862ab6a09eb5dcbad5, ba59b96d8d21dc8729fca44a022ca5919c1848c9, 13fe4cd9ddd0aacb7777812328be525a11ea3fea |
| Linux/Linuxgeneric | 4.2 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Memory allocated by btt_freelist_init(), btt_rtt_init(), and btt_maplocks_init() is not freed on some discover_arenas() error paths. This leaks memory when arena discovery fails. Add the missing kfree() calls to release the allocations before returning an error. [ as: commit message and log edits ]
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=5212e11fde4d40fa627668b4f2222d20db488f71 <2d0364937550a7b3e2592629c2a68753ac020b28 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <eeb95774bc79268e2b78ebf01d8781560b5bd671 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <7563f69caa9143a491d5f26e563255c734751545 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <0b0d9404951aacc9717aa61e77af4a6e9e8f8249 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <873ced7f345e99f7ee16f9ff226515580332ecc4 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <30d490bb2c4cd220e7dedf862ab6a09eb5dcbad5 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <ba59b96d8d21dc8729fca44a022ca5919c1848c9 || >=5212e11fde4d40fa627668b4f2222d20db488f71 <13fe4cd9ddd0aacb7777812328be525a11ea3fea | 2d0364937550a7b3e2592629c2a68753ac020b28, eeb95774bc79268e2b78ebf01d8781560b5bd671, 7563f69caa9143a491d5f26e563255c734751545, 0b0d9404951aacc9717aa61e77af4a6e9e8f8249, 873ced7f345e99f7ee16f9ff226515580332ecc4, 30d490bb2c4cd220e7dedf862ab6a09eb5dcbad5, ba59b96d8d21dc8729fca44a022ca5919c1848c9, 13fe4cd9ddd0aacb7777812328be525a11ea3fea |
| Linux/Linuxgeneric | 4.2 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Memory allocated by btt_freelist_init(), btt_rtt_init(), and btt_maplocks_init() is not freed on some discover_arenas() error paths. This leaks memory when arena discovery fails. Add the missing kfree() calls to release the allocations before returning an error. [ as: commit message and log edits ]
Quoted source text, attributed separately from HOL analysis.