CVE-2026-72038

net: liquidio: fix BAR resource leak on PF number failure

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: fix BAR resource leak on PF number failure

If cn23xx_get_pf_num() fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path.

Found by manual code review.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 75b924759de9427761115301308c137904aa3f99Affected 0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 4a45884566bab4122bbeb8fff7d2d6b5fdbded24Affected 0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 020e52aee732bb08e6b89dd02bbf88895a50fffdAffected 0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before b74f293e5f38052cfa14710abfacd6b6561cc2d6Affected 0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before a22103618ee5b6ee884c374351f65fcdff7248f0Affected 0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67Affected 0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 4140c516473a0e116ab3a73f9320c2aa5800210bAffected 0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496Affected
LinuxLinux	4.14Affected before 4.14Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 75b924759de9427761115301308c137904aa3f99Affected
0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 4a45884566bab4122bbeb8fff7d2d6b5fdbded24Affected
0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 020e52aee732bb08e6b89dd02bbf88895a50fffdAffected
0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before b74f293e5f38052cfa14710abfacd6b6561cc2d6Affected
0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before a22103618ee5b6ee884c374351f65fcdff7248f0Affected
0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67Affected
0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before 4140c516473a0e116ab3a73f9320c2aa5800210bAffected
0c45d7fe12c7e1510bae9dfac189c8b927e4636b to before c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496Affected

LinuxLinux

4.14Affected
before 4.14Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.