{"id":"CVE-2026-72088","summary":"scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path\n\nIf phys_disk-\u003ein_reset is set, the function returns directly without\nundoing the resources acquired for the command. Add the missing error\ncleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping\nthe SCSI command, and dropping the outstanding IOACCEL command count\nbefore returning.","modified":"2026-08-18T03:31:23.334331751Z","published":"2026-08-15T05:52:36.155Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72088.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72088.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72088"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c5dfd106414f3e038fee5c6f0800fd55ed07b41d"},{"fixed":"fca5edd748f00e87f2dd55a6333722b46af30e74"},{"fixed":"fb40928c59329a50eadb3ce8bfd7a67f490a6212"},{"fixed":"018cbce6ee158244bb76cf638e8e3054e240aea9"},{"fixed":"a61de4d7e22a9ab9a90094d0e180b378e09a1d2c"},{"fixed":"e7bde072cceefc564413b46d64017c47a2e9977d"},{"fixed":"d495b403d5b357dfe506b963bd7a78ecd5c7b667"},{"fixed":"782e1bf48672be44265c48e14602696c3c8ed904"},{"fixed":"e166bafc483e927150cb9b5f286c9191ea0df84e"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72088.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.0"},{"fixed":"5.10.261"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.212"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.178"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.145"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.97"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.40"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.1.5"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72088.json"}}],"schema_version":"1.9.0"}