Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
Back

CVE-2026-72088

scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.

Timeline

  1. ID reserved

    By Linux

  2. · 6 days later

    Published

  3. · 3 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.

EPSS (exploitation in 30 days)
0.22% · top 87% of all CVEs (10 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.

Affected products

  • Linux · Linux

    • affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d – < fca5edd748f00e87f2dd55a6333722b46af30e74
    • affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d – < fb40928c59329a50eadb3ce8bfd7a67f490a6212
    • affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d – < 018cbce6ee158244bb76cf638e8e3054e240aea9
    • affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d – < a61de4d7e22a9ab9a90094d0e180b378e09a1d2c
    • affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d – < e7bde072cceefc564413b46d64017c47a2e9977d
    • affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d – < d495b403d5b357dfe506b963bd7a78ecd5c7b667
    • affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d – < 782e1bf48672be44265c48e14602696c3c8ed904
    • affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d – < e166bafc483e927150cb9b5f286c9191ea0df84e
  • Linux · Linux

    • affected 5.3
    • unaffected < 5.3
    • unaffected 5.10.261 – ≤ 5.10.*
    • unaffected 5.15.212 – ≤ 5.15.*
    • unaffected 6.1.178 – ≤ 6.1.*
    • unaffected 6.6.145 – ≤ 6.6.*
    • unaffected 6.12.97 – ≤ 6.12.*
    • unaffected 6.18.40 – ≤ 6.18.*
    • unaffected 7.1.5 – ≤ 7.1.*
    • unaffected 7.2 – ≤ *

References

8

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2026-72088 badge
[![CVE-2026-72088](https://cveledger.app/badge/CVE-2026-72088.svg)](https://cveledger.app/cve/CVE-2026-72088)

Record last updated .