CVE-2026-72088

scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before fca5edd748f00e87f2dd55a6333722b46af30e74Affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before fb40928c59329a50eadb3ce8bfd7a67f490a6212Affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before 018cbce6ee158244bb76cf638e8e3054e240aea9Affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before a61de4d7e22a9ab9a90094d0e180b378e09a1d2cAffected c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before e7bde072cceefc564413b46d64017c47a2e9977dAffected c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before d495b403d5b357dfe506b963bd7a78ecd5c7b667Affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before 782e1bf48672be44265c48e14602696c3c8ed904Affected c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before e166bafc483e927150cb9b5f286c9191ea0df84eAffected
LinuxLinux	5.3Affected before 5.3Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before fca5edd748f00e87f2dd55a6333722b46af30e74Affected
c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before fb40928c59329a50eadb3ce8bfd7a67f490a6212Affected
c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before 018cbce6ee158244bb76cf638e8e3054e240aea9Affected
c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before a61de4d7e22a9ab9a90094d0e180b378e09a1d2cAffected
c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before e7bde072cceefc564413b46d64017c47a2e9977dAffected
c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before d495b403d5b357dfe506b963bd7a78ecd5c7b667Affected
c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before 782e1bf48672be44265c48e14602696c3c8ed904Affected
c5dfd106414f3e038fee5c6f0800fd55ed07b41d to before e166bafc483e927150cb9b5f286c9191ea0df84eAffected

LinuxLinux

5.3Affected
before 5.3Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.