{"apiVersion":"1.0","identifier":"CVE-2026-72406","description":"In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_one() calls gem_remove_one() when register_netdev() fails. gem_remove_one() unregisters and frees resources owned by the net_device, including the DMA block, MMIO mapping, PCI regions, and the net_device itself. gem_init_one() then falls through to its own cleanup labels and frees the same resources again. Keep the register_netdev() error path in gem_init_one(): clear drvdata so PM/remove paths do not see a half-registered device, remove the NAPI instance added during probe, and let the existing cleanup labels release the resources once. The issue was found by a local static-analysis checker for probe error paths. The reported path was manually inspected before sending this fix. Compile-tested with CONFIG_SUNGEM=y. Runtime testing was not performed because no sungem hardware is available.","publishedAt":"2026-08-15T06:22:14","lastModifiedAt":"2026-08-17T06:19:07","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72406","cvssScore":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00164,"riskScore":0.79,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-72406","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-72406","en":"https://www.redsauce.net/en/cves/CVE-2026-72406","fr":"https://www.redsauce.net/fr/cves/CVE-2026-72406","pt":"https://www.redsauce.net/pt/cves/CVE-2026-72406","de":"https://www.redsauce.net/de/cves/CVE-2026-72406","sk":"https://www.redsauce.net/sk/cves/CVE-2026-72406","el":"https://www.redsauce.net/el/cves/CVE-2026-72406"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-72406"}}