CVE-2026-72088
In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command.
Does this matter?
Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.
Description
In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.
- CVSS
- Not yet scored
- EPSS
- 0.22% probability · 12th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS 0.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9
- https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904
- https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c
- https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667
- https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e
- https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d
- https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212
- https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.