CVE-2026-72088 (GCVE-0-2026-72088)
Vulnerability from cvelistv5
Published
2026-08-15 05:52
Modified
2026-08-17 05:07
Severity ?
VLAI Severity ?
EPSS score ?
Summary
In the Linux kernel, the following vulnerability has been resolved:
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
If phys_disk->in_reset is set, the function returns directly without
undoing the resources acquired for the command. Add the missing error
cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping
the SCSI command, and dropping the outstanding IOACCEL command count
before returning.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Linux | Linux |
Version: c5dfd106414f3e038fee5c6f0800fd55ed07b41d Version: c5dfd106414f3e038fee5c6f0800fd55ed07b41d Version: c5dfd106414f3e038fee5c6f0800fd55ed07b41d Version: c5dfd106414f3e038fee5c6f0800fd55ed07b41d Version: c5dfd106414f3e038fee5c6f0800fd55ed07b41d Version: c5dfd106414f3e038fee5c6f0800fd55ed07b41d Version: c5dfd106414f3e038fee5c6f0800fd55ed07b41d Version: c5dfd106414f3e038fee5c6f0800fd55ed07b41d |
||
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"drivers/scsi/hpsa.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "fca5edd748f00e87f2dd55a6333722b46af30e74",
"status": "affected",
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"versionType": "git"
},
{
"lessThan": "fb40928c59329a50eadb3ce8bfd7a67f490a6212",
"status": "affected",
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"versionType": "git"
},
{
"lessThan": "018cbce6ee158244bb76cf638e8e3054e240aea9",
"status": "affected",
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"versionType": "git"
},
{
"lessThan": "a61de4d7e22a9ab9a90094d0e180b378e09a1d2c",
"status": "affected",
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"versionType": "git"
},
{
"lessThan": "e7bde072cceefc564413b46d64017c47a2e9977d",
"status": "affected",
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"versionType": "git"
},
{
"lessThan": "d495b403d5b357dfe506b963bd7a78ecd5c7b667",
"status": "affected",
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"versionType": "git"
},
{
"lessThan": "782e1bf48672be44265c48e14602696c3c8ed904",
"status": "affected",
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"versionType": "git"
},
{
"lessThan": "e166bafc483e927150cb9b5f286c9191ea0df84e",
"status": "affected",
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"versionType": "git"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"drivers/scsi/hpsa.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "5.3"
},
{
"lessThan": "5.3",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.261",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.212",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.178",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.6.*",
"status": "unaffected",
"version": "6.6.145",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.12.*",
"status": "unaffected",
"version": "6.12.97",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.18.*",
"status": "unaffected",
"version": "6.18.40",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.1.*",
"status": "unaffected",
"version": "7.1.5",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "7.2",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.261",
"versionStartIncluding": "5.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.212",
"versionStartIncluding": "5.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.178",
"versionStartIncluding": "5.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6.145",
"versionStartIncluding": "5.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.12.97",
"versionStartIncluding": "5.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.18.40",
"versionStartIncluding": "5.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.1.5",
"versionStartIncluding": "5.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "7.2",
"versionStartIncluding": "5.3",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path\n\nIf phys_disk-\u003ein_reset is set, the function returns directly without\nundoing the resources acquired for the command. Add the missing error\ncleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping\nthe SCSI command, and dropping the outstanding IOACCEL command count\nbefore returning."
}
],
"providerMetadata": {
"dateUpdated": "2026-08-17T05:07:59.011Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74"
},
{
"url": "https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212"
},
{
"url": "https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9"
},
{
"url": "https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c"
},
{
"url": "https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d"
},
{
"url": "https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667"
},
{
"url": "https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904"
},
{
"url": "https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e"
}
],
"title": "scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2026-72088",
"datePublished": "2026-08-15T05:52:36.155Z",
"dateReserved": "2026-08-09T03:40:39.905Z",
"dateUpdated": "2026-08-17T05:07:59.011Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…