Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-72214

power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak

Description

In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak In cpcap_battery_detect_battery_type(), the reference to an nvmem device obtained via nvmem_device_find() is not released with nvmem_device_put() on the success or read-failure paths, causing a permanent reference leak. The driver’s retry logic on subsequent battery property reads can compound this leak, preventing the nvmem device from ever being freed. Found by code review.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fd46821e85de90fb5b7356251164af4815b6e3f6 to < fc65520fe0781a1ff46631f111e07b4a1c677b96affected
  • fd46821e85de90fb5b7356251164af4815b6e3f6 to < 700c225d829a1256b59053c34a1a9d1a6ab70b09affected
  • fd46821e85de90fb5b7356251164af4815b6e3f6 to < deaf6b3f8187231ad8f7770b10ed0be2cd47e9b2affected
  • fd46821e85de90fb5b7356251164af4815b6e3f6 to < a3d81de441233a92ec21469cd0c4eb3c26b95cd8affected
  • fd46821e85de90fb5b7356251164af4815b6e3f6 to < b56a5cbf8f1f1a5740f1137c89b14d0373309d8daffected
  • fd46821e85de90fb5b7356251164af4815b6e3f6 to < a2c14ff63e0e02e3c832385e523e9cc81301171caffected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References