SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72088

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the hpsa SCSI driver, specifically related to improper handling of DMA mapping during the IOACCEL2 reset process. If the physical disk is in a reset state, the function fails to release acquired resources, potentially leading to resource leaks and degraded system performance. Administrators of systems utilizing the affected Linux kernel should prioritize applying the fix to mitigate the risk of resource exhaustion and ensure optimal operation.

CVE
CVE-2026-72088
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.