CVE-2026-72088: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
In the Linux kernel, the following vulnerability has been resolved:
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
If physdisk->inreset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72088?
The severity of CVE-2026-72088 is classified as risk 17.
What components are affected by CVE-2026-72088?
CVE-2026-72088 specifically affects the Linux kernel's SCSI hpsa driver.
How does CVE-2026-72088 impact system performance?
CVE-2026-72088 can lead to resource leaks during the IOACCEL2 reset path, potentially affecting system stability.
How do I fix CVE-2026-72088?
To fix CVE-2026-72088, apply the latest patches provided for the Linux kernel that address this vulnerability.
What are the symptoms of CVE-2026-72088?
Symptoms of CVE-2026-72088 may include unexpected behavior in I/O operations and possible system resource exhaustion.