{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"f471ecfec093e39ef8fd08978413793087daa14d","status":"affected","version":"28ca6d876c5a375094847606046e0bf5d044d9b4","versionType":"git"},{"lessThan":"fdf1188cfa80f88c9f18d58cb33d57ff40e70e26","status":"affected","version":"28ca6d876c5a375094847606046e0bf5d044d9b4","versionType":"git"},{"lessThan":"d52e13122d3771f753dd73ae6512fa01f58015cb","status":"affected","version":"28ca6d876c5a375094847606046e0bf5d044d9b4","versionType":"git"},{"lessThan":"e5579ebaadc7b699868dad0f591a7bf83cd647e1","status":"affected","version":"28ca6d876c5a375094847606046e0bf5d044d9b4","versionType":"git"},{"lessThan":"454570434114e4862767f506a442a0f110b639b2","status":"affected","version":"28ca6d876c5a375094847606046e0bf5d044d9b4","versionType":"git"},{"lessThan":"41b37312bd9722af77ec7817ccf22d7a4880c289","status":"affected","version":"28ca6d876c5a375094847606046e0bf5d044d9b4","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.16"},{"lessThan":"5.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.128","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.75","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.14","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-45872","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: smartpqi: Fix memory leak in pqi_report_phys_luns()\n\npqi_report_phys_luns() fails to release the rpl_list buffer when\nencountering an unsupported data format or when the allocation for\nrpl_16byte_wwid_list fails. These early returns bypass the cleanup logic,\nleading to memory leaks.\n\nConsolidate the error handling by adding an out_free_rpl_list label and use\ngoto statements to ensure rpl_list is consistently freed on failure.\n\nCompile tested only. Issue found using a prototype static analysis tool and\ncode review.","epss":{"date":"2026-11-06","percentile":0.06511,"score":0.00171},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793980390065,"publishedAt":1779884152133,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/f471ecfec093e39ef8fd08978413793087daa14d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/fdf1188cfa80f88c9f18d58cb33d57ff40e70e26"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d52e13122d3771f753dd73ae6512fa01f58015cb"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e5579ebaadc7b699868dad0f591a7bf83cd647e1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/454570434114e4862767f506a442a0f110b639b2"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/41b37312bd9722af77ec7817ccf22d7a4880c289"}],"remediation":[],"revision":"ca4662c5e02906d599fbff8208a687668f2714f747648fc098751e2aa40a9559","sources":[{"modifiedAt":1793980390065,"name":"CNA: Linux","retrievedAt":1793981756414,"url":"https://www.cve.org/CVERecord?id=CVE-2026-45872"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793981758074,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-45872"}],"ssvc":{"assessedAt":1793979786508,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"scsi: smartpqi: Fix memory leak in pqi_report_phys_luns()","updatedAt":1793981758074}