CVE-2026-72039

bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()

If the allocation of fp[i].tpa_info fails, the error path will not free the struct bnx2x_fastpath allocated earlier, as it is not linked to the bp structure yet. Fix that by linking it immediately after allocation.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 58594ed2a2f859ffb93edbbfa4aabb7739bea383Affected 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before c51b280b9cd3c9e97bf2cde33bb795c511f09669Affected 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 6d46eaa1e4c078ad674908e24b86e431a7fd4b15Affected 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 5576ee19a6a4aa111c61ce974e70bb79e7bb3952Affected 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 7d8d454b5d24dbad346cd57ef315e7bf1ee8e856Affected 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403Affected 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 356077547b1afa34a8ebae77176a577631a89041Affected 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before a986fde914d88af47eb78fd29c5d1af7952c3500Affected
LinuxLinux	3.6Affected before 3.6Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 58594ed2a2f859ffb93edbbfa4aabb7739bea383Affected
15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before c51b280b9cd3c9e97bf2cde33bb795c511f09669Affected
15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 6d46eaa1e4c078ad674908e24b86e431a7fd4b15Affected
15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 5576ee19a6a4aa111c61ce974e70bb79e7bb3952Affected
15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 7d8d454b5d24dbad346cd57ef315e7bf1ee8e856Affected
15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403Affected
15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before 356077547b1afa34a8ebae77176a577631a89041Affected
15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 to before a986fde914d88af47eb78fd29c5d1af7952c3500Affected

LinuxLinux

3.6Affected
before 3.6Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.