CVE-2026-72038

Summary

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: fix BAR resource leak on PF number failure

If cn23xx_get_pf_num() fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path.

Found by manual code review.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux0c45d7fe12c7e1510bae9dfac189c8b927e4636b < 75b924759de9427761115301308c137904aa3f99affected
LinuxLinux0c45d7fe12c7e1510bae9dfac189c8b927e4636b < 4a45884566bab4122bbeb8fff7d2d6b5fdbded24affected
LinuxLinux0c45d7fe12c7e1510bae9dfac189c8b927e4636b < 020e52aee732bb08e6b89dd02bbf88895a50fffdaffected
LinuxLinux0c45d7fe12c7e1510bae9dfac189c8b927e4636b < b74f293e5f38052cfa14710abfacd6b6561cc2d6affected
LinuxLinux0c45d7fe12c7e1510bae9dfac189c8b927e4636b < a22103618ee5b6ee884c374351f65fcdff7248f0affected
LinuxLinux0c45d7fe12c7e1510bae9dfac189c8b927e4636b < 715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67affected
LinuxLinux0c45d7fe12c7e1510bae9dfac189c8b927e4636b < 4140c516473a0e116ab3a73f9320c2aa5800210baffected
LinuxLinux0c45d7fe12c7e1510bae9dfac189c8b927e4636b < c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496affected
LinuxLinux4.14affected
LinuxLinux0 < 4.14unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References