CVE-2026-72109

CVE-2026-72109

High · published August 15, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: sparx5: unregister blocking notifier on init failure

sparx5_register_notifier_blocks() registers the switchdev blocking

notifier before allocating the ordered workqueue. If the workqueue

allocation fails, the error path unregisters the switchdev and netdevice

notifiers, but leaves the blocking notifier registered.

Add a separate error label for the workqueue allocation failure path and

unregister the switchdev blocking notifier there.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00164 · 5.3th percentile
Published
2026-08-15T10:21Z
References (7)
EPSS history
Timeline
  • 15 AUG 05:52Z
    net: sparx5: unregister blocking notifier on init failure
    cvelistv5