CVE-2026-72259

A flaw was found in the Linux kernel's ASoC (Audio System on Chip) Mediatek MT8192 audio driver. This vulnerability occurs because the driver fails to release reserved memory after a successful assignment during the probe process. This oversight can lead to a memory leak, potentially causing system instability or a Denial of Service (DoS) due to resource exhaustion over extended operation.

A moderate-impact memory leak flaw was found in the Linux kernel's ASoC (ALSA System on Chip) Mediatek MT8192 audio driver as shipped in Red Hat Enterprise Linux 10. When the MT8192 AFE driver probe successfully assigns a reserved memory region through of_reserved_mem_device_init(), the assignment is never released, so that reserved memory is leaked on probe failure and on every driver unbind. A local user with the privileges required to rebind or re-probe the audio device could repeat this cycle to progressively exhaust reserved memory, causing a denial of service through resource exhaustion over extended operation; there is no impact on confidentiality or integrity (Red Hat CVSS:3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Within Red Hat's portfolio, only the Red Hat Enterprise Linux 10 kernel (rhel-10.2.z and rhel-10.3 streams) contains the vulnerable code and is affected; because this is a moderate-severity, local, availability-only resource leak, the fix for these streams is currently deferred and the residual risk is limited to a local denial of service. Other Red Hat Enterprise Linux streams (RHEL 6, 7, 8, 9, and rhel-10.0.z, including all kernel-rt builds) and the Red Hat In-Vehicle OS streams are not affected because the vulnerable code is not present in those kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.