CVE-2026-72081 scsi: elx: efct: Fix I/O leak on unsupported additional CDB

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efctdispatchfcpcmd allocates an efctio before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before...

CVE-2026-72081 scsi: elx: efct: Fix I/O leak on unsupported additional CDB

In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported additional CDB efctdispatchfcpcmd allocates an efctio before dispatching an unsolicited FCP command. If the command has an unsupported additional CDB, the function returns -EIO before...

CVE-2026-72080

CVE-2026-72080 affects the Linux kernel resctrl filesystem (fs/resctrl). The issue is a use-after-free during unmount/failure teardown: mon_data structures for the default resource group can be freed while a concurrent reader still holds references, due to RDT_DELETED not being set for the static...

CVE-2026-72077 Input: ims-pcu - fix firmware leak in async update

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use freefirmware to ensure the firmware is always released...

CVE-2026-72077 Input: ims-pcu - fix firmware leak in async update

In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - fix firmware leak in async update The firmware object was not being released if validation failed. Use freefirmware to ensure the firmware is always released...

CVE-2026-72059 net: wwan: t7xx: destroy DMA pool on CLDMA late init failure

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: destroy DMA pool on CLDMA late init failure t7xxcldmalateinit creates mdctrl-gpddmapool before initializing the TX and RX rings. If any ring initialization fails, the error path frees the already initialized ring...

CVE-2026-72059

Summary: The CVE-2026-72059 issue in the Linux kernel affects the wwan t7xx driver. During CLDMA late initialization, md_ctrl->gpd_dmapool is created before TX/RX rings are initialized. If a ring init fails, the code frees initialized rings but leaks the DMA pool. Consequence: potential DMA po...

EUVD-2026-59016

In the Linux kernel, the following vulnerability has been resolved: net: ixp4xxhss: fix duplicate HDLC netdev allocation ixp4xxhssprobe allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered with registerhdlcdevice. The second one is stored in port-netdev and lat...

CVE-2026-72058 net: ixp4xx_hss: fix duplicate HDLC netdev allocation

In the Linux kernel, the following vulnerability has been resolved: net: ixp4xxhss: fix duplicate HDLC netdev allocation ixp4xxhssprobe allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered with registerhdlcdevice. The second one is stored in port-netdev and lat...

CVE-2026-72058 net: ixp4xx_hss: fix duplicate HDLC netdev allocation

In the Linux kernel, the following vulnerability has been resolved: net: ixp4xxhss: fix duplicate HDLC netdev allocation ixp4xxhssprobe allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered with registerhdlcdevice. The second one is stored in port-netdev and lat...

CVE-2026-72056 net: ena: clean up XDP TX queues when regular TX setup fails

In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails createqueueswithsizebackoff creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error...

CVE-2026-72056

Summary (CVE-2026-72056): In the Linux kernel, the ENA driver’s XDP TX queue handling leaks resources when regular TX queue setup fails. Specifically, create_queues_with_size_backoff() creates XDP TX queues prior to establishing the regular TX path; if the subsequent allocation/creation of regula...

EUVD-2026-59014

In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails createqueueswithsizebackoff creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error...

CVE-2026-72056 net: ena: clean up XDP TX queues when regular TX setup fails

In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails createqueueswithsizebackoff creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error...

CVE-2026-72050

The CVE-2026-72050 entry concerns the Linux kernel subsystem octeontx2-af where BPID bitmap handling in setup is flawed. Specifically, nix_setup_bpids() allocates bp->bpids via rvu_alloc_bitmap() (using a plain kcalloc). If any subsequent devm_kcalloc() allocations for the BPID mapping arrays ...

CVE-2026-72050 octeontx2-af: Free BPID bitmap on setup failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with rvuallocbitmap, which uses a plain kcalloc. If any of the following devmkcalloc allocations for the BPID mapping arrays fails, the function...

CVE-2026-72050 octeontx2-af: Free BPID bitmap on setup failure

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with rvuallocbitmap, which uses a plain kcalloc. If any of the following devmkcalloc allocations for the BPID mapping arrays fails, the function...

CVE-2026-72039 bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix potential memory leak in bnx2xallocmembp If the allocation of fpi.tpainfo fails, the error path will not free the struct bnx2xfastpath allocated earlier, as it is not linked to the bp structure yet. Fix that by linking...

CVE-2026-72040 ipmi: fix refcount leak in i_ipmi_request()

In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in iipmirequest When a caller provides a suppliedrecv message to iipmirequest, the function increments the user's nrmsgs reference count. If an error occurs later, the outerr cleanup path only frees the...

EUVD-2026-58996

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: fix BAR resource leak on PF number failure If cn23xxgetpfnum fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path. Found by manual code review...