Linux Kernel CVE-2026-72171

The affected subsystem is the slram (simulated RAM) driver within the Linux kernel's Memory Technology Device (MTD) framework, which exposes arbitrary physical memory regions as MTD block devices - primarily used in embedded systems and testing environments. The root cause is an improper error-path unwind in register_device(): the function appends a new slram_mtdlist entry to the tail of the global linked list *before* completing all three initialization steps (heap allocation, memremap() of the physical region, and mtd_device_register()). If any of those steps fail, the partially initialized entry is orphaned on the list with invalid or NULL internal state. Subsequent module unload or list-walking cleanup operations traverse this entry and dereference the invalid state, which can trigger use-after-free or null pointer dereference conditions in kernel context. No formal CWE is assigned, but this maps to CWE-459 (Incomplete Cleanup) and CWE-416 (Use After Free). The vulnerability has existed since Linux 2.6.12 (the initial kernel commit 1da177e4c3f4) and is patched via stable-tree commits across multiple branches, all referenced at https://git.kernel.org/stable/.