CVE-2026-72087

scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 23, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()

The memory allocated for mboxq using mempool_alloc() is not freed in some of the early exit error paths. Fix that by moving the mempool_free() call to an earlier point after last use.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 4d920852c0a3cfbcb42bcd2680b091f5c0072fc2Affected d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 7795037f15289ac1ed620603511b67d820a93762Affected d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 299f5baa1321a0951cc3ebbacc72b67433a65391Affected d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before c3f4e407661542d1d284fc889cf9f27afd11b3d3Affected d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 25cac8a302626f59ca84fa3339e2506c3ac761bcAffected d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before ed08497977820e002a62cb114440f365cc7a087fAffected d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 0ce5a37f7ddf2fc12210e8700350274da79fbb3aAffected d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 1bd28625e25be549ee7c47532e7c3ef91c682410Affected
LinuxLinux	5.4Affected before 5.4Not affected 5.10.266 through 5.10.Not affected 5.15.217 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 4d920852c0a3cfbcb42bcd2680b091f5c0072fc2Affected
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 7795037f15289ac1ed620603511b67d820a93762Affected
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 299f5baa1321a0951cc3ebbacc72b67433a65391Affected
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before c3f4e407661542d1d284fc889cf9f27afd11b3d3Affected
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 25cac8a302626f59ca84fa3339e2506c3ac761bcAffected
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before ed08497977820e002a62cb114440f365cc7a087fAffected
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 0ce5a37f7ddf2fc12210e8700350274da79fbb3aAffected
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 to before 1bd28625e25be549ee7c47532e7c3ef91c682410Affected

LinuxLinux

5.4Affected
before 5.4Not affected
5.10.266 through 5.10.*Not affected
5.15.217 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.