CVE-2026-72087

Summary

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()

The memory allocated for mboxq using mempool_alloc() is not freed in some of the early exit error paths. Fix that by moving the mempool_free() call to an earlier point after last use.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 299f5baa1321a0951cc3ebbacc72b67433a65391affected
LinuxLinuxd79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < c3f4e407661542d1d284fc889cf9f27afd11b3d3affected
LinuxLinuxd79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 25cac8a302626f59ca84fa3339e2506c3ac761bcaffected
LinuxLinuxd79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < ed08497977820e002a62cb114440f365cc7a087faffected
LinuxLinuxd79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 0ce5a37f7ddf2fc12210e8700350274da79fbb3aaffected
LinuxLinuxd79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 1bd28625e25be549ee7c47532e7c3ef91c682410affected
LinuxLinux5.4affected
LinuxLinux0 < 5.4unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References