{"id":"CVE-2026-72109","summary":"net: sparx5: unregister blocking notifier on init failure","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sparx5: unregister blocking notifier on init failure\n\nsparx5_register_notifier_blocks() registers the switchdev blocking\nnotifier before allocating the ordered workqueue. If the workqueue\nallocation fails, the error path unregisters the switchdev and netdevice\nnotifiers, but leaves the blocking notifier registered.\n\nAdd a separate error label for the workqueue allocation failure path and\nunregister the switchdev blocking notifier there.","modified":"2026-08-18T03:56:20.071930300Z","published":"2026-08-15T05:52:51.067Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72109.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/17f113e7b622dc850992ade540181717de6a8561"},{"type":"WEB","url":"https://git.kernel.org/stable/c/483be61b4a9a6df3b7cb277e8f189e082dee4cb8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8a3c44a003176282ee4306b7c96e5a536c6f0707"},{"type":"WEB","url":"https://git.kernel.org/stable/c/cf419c869e0d03aad4b6f4ecf0a813851930dfe7"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d6084c47389fd6978a5d66b0d58206a548c792a9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e5afc6d3fabdf1f605d63c4b34a3df6c359e81f3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fbc65b17508ed5464b7106e7fa5f15251ca1b603"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72109.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72109"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d6fce5141929697a27f029c633433d487f6f62cb"},{"fixed":"fbc65b17508ed5464b7106e7fa5f15251ca1b603"},{"fixed":"e5afc6d3fabdf1f605d63c4b34a3df6c359e81f3"},{"fixed":"cf419c869e0d03aad4b6f4ecf0a813851930dfe7"},{"fixed":"d6084c47389fd6978a5d66b0d58206a548c792a9"},{"fixed":"8a3c44a003176282ee4306b7c96e5a536c6f0707"},{"fixed":"17f113e7b622dc850992ade540181717de6a8561"},{"fixed":"483be61b4a9a6df3b7cb277e8f189e082dee4cb8"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72109.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.14.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72109.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}