CVE-2026-72088
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-08-15 06:21:22.843000
Last modified
2026-11-06 17:19:37.007000
View original CVE JSON
{
"id": "CVE-2026-72088",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2026-08-15T06:21:22.843",
"lastModified": "2026-11-06T17:19:37.007",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path\n\nIf phys_disk->in_reset is set, the function returns directly without\nundoing the resources acquired for the command. Add the missing error\ncleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping\nthe SCSI command, and dropping the outstanding IOACCEL command count\nbefore returning."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"drivers/scsi/hpsa.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"lessThan": "fca5edd748f00e87f2dd55a6333722b46af30e74",
"versionType": "git",
"status": "affected"
},
{
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"lessThan": "fb40928c59329a50eadb3ce8bfd7a67f490a6212",
"versionType": "git",
"status": "affected"
},
{
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"lessThan": "018cbce6ee158244bb76cf638e8e3054e240aea9",
"versionType": "git",
"status": "affected"
},
{
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"lessThan": "a61de4d7e22a9ab9a90094d0e180b378e09a1d2c",
"versionType": "git",
"status": "affected"
},
{
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"lessThan": "e7bde072cceefc564413b46d64017c47a2e9977d",
"versionType": "git",
"status": "affected"
},
{
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"lessThan": "d495b403d5b357dfe506b963bd7a78ecd5c7b667",
"versionType": "git",
"status": "affected"
},
{
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"lessThan": "782e1bf48672be44265c48e14602696c3c8ed904",
"versionType": "git",
"status": "affected"
},
{
"version": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d",
"lessThan": "e166bafc483e927150cb9b5f286c9191ea0df84e",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"drivers/scsi/hpsa.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5.3",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.3",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.261",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.212",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.178",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.145",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.97",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.40",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.1.5",
"lessThanOrEqual": "7.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "7.2",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-11-06T16:51:29.337917Z",
"id": "CVE-2026-72088",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"references": [
{
"url": "https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}