What’s Vulnerable › Vulnerabilities

CVE-2026-72453: regcache: Do not overwrite error code when finalizing cache after error

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: regcache: Do not overwrite error code when finalizing cache after error During regcache initialization, if an error occurs in the cache_ops->populate callback, and if cache operations include an exit callback, the error code from populate() is overwritten with the return value from exit(). This hides the error condition from the caller of regcache_init(), and can cause NULL pointer dereferences when the regcache is later accessed.

Affected products

• Linux: 6.19 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/9108f7fa493b4c88cbc09503e0c164244456bad5
• https://git.kernel.org/stable/c/9f171aa115ec76be02c76c5765cd2c865279e34a
• https://git.kernel.org/stable/c/b454870bbdb3b34ffeaebf0d8e1726cc0aaa2de4
• https://git.kernel.org/stable/c/bae057687f61580dd897411cd749da22a7740647

Get alerted when CVE-2026-72453 or the next vulnerability affects your stack