CVE-2026-72088

Not scored yetLast modified Nov 6, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= c5dfd106414f3e038fee5c6f0800fd55ed07b41d, < fca5edd748f00e87f2dd55a6333722b46af30e74; >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d, < fb40928c59329a50eadb3ce8bfd7a67f490a6212; >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d, < 018cbce6ee158244bb76cf638e8e3054e240aea9; >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d, < a61de4d7e22a9ab9a90094d0e180b378e09a1d2c; >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d, < e7bde072cceefc564413b46d64017c47a2e9977d; >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d, < d495b403d5b357dfe506b963bd7a78ecd5c7b667; >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d, < 782e1bf48672be44265c48e14602696c3c8ed904; >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d, < e166bafc483e927150cb9b5f286c9191ea0df84e
LinuxLinux5.3

References

Timeline

Published
Aug 15, 2026
Last modified
Nov 6, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-720897.1In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Reject firmware log with size smaller than header fw_log_fCVE-2026-72096.4The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `qcopd-directory` shortcode in CVE-2026-720907.8In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Use caller client for debug BO sync amdxdna_drm_sync_boCVE-2026-72091In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdCVE-2026-72092In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject command submission on devices without a submit opCVE-2026-720937.8In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() When vmCVE-2026-72094In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-fence: Fix potential NULL pointer dereference The commit CVE-2026-720957.8In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dma_fence_dedup_array() robust against 0-count input dCVE-2026-72096In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error counter "v->corrupted_eCVE-2026-72097In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereference Fix a possible NULLCVE-2026-720989.8In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix buffer overflow in FEC calculation There's a buffer oveCVE-2026-720997.1In the Linux kernel, the following vulnerability has been resolved: dm-integrity: don't increment hash_offset twice hash_offset is already
CVE-2026-72088: Unscored | Vulnix