CVE-2026-72038

🗓️ 15 Aug 2026 05:51:58Reported by LinuxType

LiquidIO driver leaks BAR resources when cn23xx_get_pf_num() fails during error path.

Reporter	Title	Published	Views	Family All 14
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-129 (ALASKERNEL-5.10-2026-129)	18 Aug 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-92-0952	12 Aug 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-72038	18 Aug 202600:00	–	nessus
Cvelist	CVE-2026-72038 net: liquidio: fix BAR resource leak on PF number failure	15 Aug 202605:51	–	cvelist
Debian CVE	CVE-2026-72038	15 Aug 202605:51	–	debiancve
EUVD	EUVD-2026-58996	15 Aug 202605:51	–	euvd
NVD	CVE-2026-72038	15 Aug 202606:21	–	nvd
OSV	BELL-CVE-2026-72038	18 Aug 202606:06	–	osv
OSV	DEBIAN-CVE-2026-72038	15 Aug 202606:21	–	osv
OSV	UBUNTU-CVE-2026-72038	15 Aug 202606:21	–	osv

Vulners

CNA

Node

linux linux_kernelRange4.14–5.10.261

linux linux_kernelRange5.11.0–5.15.212

linux linux_kernelRange5.16.0–6.1.178

linux linux_kernelRange6.2.0–6.6.145

linux linux_kernelRange6.7.0–6.12.97

linux linux_kernelRange6.13.0–6.18.40

linux linux_kernelRange6.19.0–7.1.5

linux linux_kernelRange7.2.0≥

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c"
    ],
    "versions": [
      {
        "version": "0c45d7fe12c7e1510bae9dfac189c8b927e4636b",
        "lessThan": "75b924759de9427761115301308c137904aa3f99",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0c45d7fe12c7e1510bae9dfac189c8b927e4636b",
        "lessThan": "4a45884566bab4122bbeb8fff7d2d6b5fdbded24",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0c45d7fe12c7e1510bae9dfac189c8b927e4636b",
        "lessThan": "020e52aee732bb08e6b89dd02bbf88895a50fffd",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0c45d7fe12c7e1510bae9dfac189c8b927e4636b",
        "lessThan": "b74f293e5f38052cfa14710abfacd6b6561cc2d6",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0c45d7fe12c7e1510bae9dfac189c8b927e4636b",
        "lessThan": "a22103618ee5b6ee884c374351f65fcdff7248f0",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0c45d7fe12c7e1510bae9dfac189c8b927e4636b",
        "lessThan": "715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0c45d7fe12c7e1510bae9dfac189c8b927e4636b",
        "lessThan": "4140c516473a0e116ab3a73f9320c2aa5800210b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0c45d7fe12c7e1510bae9dfac189c8b927e4636b",
        "lessThan": "c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c"
    ],
    "versions": [
      {
        "version": "4.14",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "4.14",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.261",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.212",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.178",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.145",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.97",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.40",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.5",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/4a45884566bab4122bbeb8fff7d2d6b5fdbded24
git	www.git.kernel.org/stable/c/75b924759de9427761115301308c137904aa3f99
git	www.git.kernel.org/stable/c/020e52aee732bb08e6b89dd02bbf88895a50fffd
git	www.git.kernel.org/stable/c/c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496
git	www.git.kernel.org/stable/c/4140c516473a0e116ab3a73f9320c2aa5800210b
git	www.git.kernel.org/stable/c/715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67
git	www.git.kernel.org/stable/c/a22103618ee5b6ee884c374351f65fcdff7248f0
git	www.git.kernel.org/stable/c/b74f293e5f38052cfa14710abfacd6b6561cc2d6

17 Aug 2026 06:18Current

5.4Medium risk

Vulners AI Score5.4

EPSS0.00211