UnratedFix available
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.261, 5.15.212, 6.1.178, 6.12.97, 6.18.40, 6.6.145, 7.1.5
- CVEs
- CVE-2026-72088
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 09:48 UTC · Revision 1
Source evidence
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
core-osv · Original sourcePublished 15 Aug 2026, 05:52 UTC
In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.
osv:CVE-2026-72088
Kernel
Fixed versions: 5.10.261, 5.15.212, 6.1.178, 6.6.145, 6.12.97, 6.18.40, 7.1.5
Complete source record
{
"id": "80b19e8cdbd3212773938e967dd7a46535782234b164a48b0876a42f93e156e1",
"url": "https://osv.dev/vulnerability/CVE-2026-72088",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path",
"summary": "In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.",
"evidence": "osv:CVE-2026-72088",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.261",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.212",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.178",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.145",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.97",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.40",
"evidence": "/affected/1/ranges"
},
{
"value": "7.1.5",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-72088",
"aliases": [
"CVE-2026-72088"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "c5dfd106414f3e038fee5c6f0800fd55ed07b41d"
},
{
"fixed": "fca5edd748f00e87f2dd55a6333722b46af30e74"
},
{
"fixed": "fb40928c59329a50eadb3ce8bfd7a67f490a6212"
},
{
"fixed": "018cbce6ee158244bb76cf638e8e3054e240aea9"
},
{
"fixed": "a61de4d7e22a9ab9a90094d0e180b378e09a1d2c"
},
{
"fixed": "e7bde072cceefc564413b46d64017c47a2e9977d"
},
{
"fixed": "d495b403d5b357dfe506b963bd7a78ecd5c7b667"
},
{
"fixed": "782e1bf48672be44265c48e14602696c3c8ed904"
},
{
"fixed": "e166bafc483e927150cb9b5f286c9191ea0df84e"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72088.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.3.0"
},
{
"fixed": "5.10.261"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.212"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.178"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.145"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.97"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.40"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.1.5"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72088.json"
}
}
],
"modified": "2026-10-28T02:30:43.574219776Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9",
"https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904",
"https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c",
"https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667",
"https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e",
"https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d",
"https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212",
"https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72088.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-72088",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72088.json"
}
},
"related_cves": [
{
"value": "CVE-2026-72088",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 511536,
"published_at": "2026-08-15T05:52:36.155+00:00"
}