SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72087

UNKNOWN · CVSS N/A EPSS 0.22%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A memory leak vulnerability exists in the Linux kernel's lpfc SCSI driver, where allocated memory for the mboxq is not properly freed during certain error exit paths. This can lead to increased memory consumption over time, potentially affecting system stability and performance. Linux system administrators and developers working with the SCSI lpfc driver should prioritize applying the fix to mitigate the risk of resource exhaustion.

CVE
CVE-2026-72087
Severity
UNKNOWN
CVSS
N/A
EPSS
0.22%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() The memory allocated for mboxq using mempool_alloc() is not freed in some of the early exit error paths. Fix that by moving the mempool_free() call to an earlier point after last use.