CVE-2026-72088
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
5.3
References 8
git.kernel.org
- stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74
- stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212
- stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9
- stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c
- stable/c/e7bde072cceefc564413b46d64017c47a2e9977d
- stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667
- stable/c/782e1bf48672be44265c48e14602696c3c8ed904
- stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e