CVE-2026-72109 json
net: sparx5: unregister blocking notifier on init failure
published 2026-08-15 2 mo ago modified 2026-08-17 2 mo ago also EUVD-2026-59067
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 5%
- public exploits
- 0
- none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
net: sparx5: unregister blocking notifier on init failure
sparx5_register_notifier_blocks() registers the switchdev blocking notifier before allocating the ordered workqueue. If the workqueue allocation fails, the error path unregisters the switchdev and netdevice notifiers, but leaves the blocking notifier registered.
Add a separate error label for the workqueue allocation failure path and unregister the switchdev blocking notifier there.
Patch / fix
- Linux Linux 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5, 7.2
- linux Debian 12 6.1.180-1
- linux Debian 13 6.12.100-1
- linux Debian 14 7.1.5-1
debian advisories DEBIAN-CVE-2026-72109
- linux Ubuntu 22.04 LTS 5.15.0-198.208
- linux Ubuntu 24.04 LTS 6.8.0-147.147
- linux Ubuntu 26.04 LTS 7.0.0-38.38
- linux-aws Ubuntu 22.04 LTS 5.15.0-1117.124
- linux-aws Ubuntu 24.04 LTS 6.8.0-1067.70
- linux-aws Ubuntu 26.04 LTS 7.0.0-1014.14
- linux-gcp Ubuntu 22.04 LTS 5.15.0-1118.128
- linux-gcp Ubuntu 24.04 LTS 6.8.0-1071.79
ubuntu advisories UBUNTU-CVE-2026-72109
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- git.kernel.org/stable/c/fbc65b17508ed5464b7106e7fa5f15251ca1b603 commit
- git.kernel.org/stable/c/e5afc6d3fabdf1f605d63c4b34a3df6c359e81f3 commit
- git.kernel.org/stable/c/cf419c869e0d03aad4b6f4ecf0a813851930dfe7 commit
- git.kernel.org/stable/c/d6084c47389fd6978a5d66b0d58206a548c792a9 commit
- git.kernel.org/stable/c/8a3c44a003176282ee4306b7c96e5a536c6f0707 commit
- git.kernel.org/stable/c/17f113e7b622dc850992ade540181717de6a8561 commit
- git.kernel.org/stable/c/483be61b4a9a6df3b7cb277e8f189e082dee4cb8 commit
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2026-72109 updated cvss 5.5
kernel: net: sparx5: unregister blocking notifier on init failure
-
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 more Red Hat Enterprise Linux 10 kernelnot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.16% chance of exploitation in the next 30 days, higher than 5% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Linux Linux
Classification
- Technology feeds
References
- git.kernel.org /stable/c/fbc65b17508ed5464b7106e7fa5f15251ca1b603
- git.kernel.org /stable/c/e5afc6d3fabdf1f605d63c4b34a3df6c359e81f3
- git.kernel.org /stable/c/cf419c869e0d03aad4b6f4ecf0a813851930dfe7
- git.kernel.org /stable/c/d6084c47389fd6978a5d66b0d58206a548c792a9
- git.kernel.org /stable/c/8a3c44a003176282ee4306b7c96e5a536c6f0707
- git.kernel.org /stable/c/17f113e7b622dc850992ade540181717de6a8561
- git.kernel.org /stable/c/483be61b4a9a6df3b7cb277e8f189e082dee4cb8
Sources
- CVE List CVE-2026-72109
- NVD CVE-2026-72109
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.