{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"4d920852c0a3cfbcb42bcd2680b091f5c0072fc2","status":"affected","version":"d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8","versionType":"git"},{"lessThan":"7795037f15289ac1ed620603511b67d820a93762","status":"affected","version":"d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8","versionType":"git"},{"lessThan":"299f5baa1321a0951cc3ebbacc72b67433a65391","status":"affected","version":"d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8","versionType":"git"},{"lessThan":"c3f4e407661542d1d284fc889cf9f27afd11b3d3","status":"affected","version":"d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8","versionType":"git"},{"lessThan":"25cac8a302626f59ca84fa3339e2506c3ac761bc","status":"affected","version":"d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8","versionType":"git"},{"lessThan":"ed08497977820e002a62cb114440f365cc7a087f","status":"affected","version":"d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8","versionType":"git"},{"lessThan":"0ce5a37f7ddf2fc12210e8700350274da79fbb3a","status":"affected","version":"d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8","versionType":"git"},{"lessThan":"1bd28625e25be549ee7c47532e7c3ef91c682410","status":"affected","version":"d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.4"},{"lessThan":"5.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.266","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.217","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.40","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-72087","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()\n\nThe memory allocated for mboxq using mempool_alloc() is not freed in\nsome of the early exit error paths. Fix that by moving the\nmempool_free() call to an earlier point after last use.","epss":{"date":"2026-11-06","percentile":0.12604,"score":0.0022},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985576827,"publishedAt":1786773155513,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/4d920852c0a3cfbcb42bcd2680b091f5c0072fc2"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/7795037f15289ac1ed620603511b67d820a93762"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/299f5baa1321a0951cc3ebbacc72b67433a65391"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/c3f4e407661542d1d284fc889cf9f27afd11b3d3"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/25cac8a302626f59ca84fa3339e2506c3ac761bc"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/ed08497977820e002a62cb114440f365cc7a087f"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/0ce5a37f7ddf2fc12210e8700350274da79fbb3a"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/1bd28625e25be549ee7c47532e7c3ef91c682410"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/0ce5a37f7ddf2fc12210e8700350274da79fbb3a"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/1bd28625e25be549ee7c47532e7c3ef91c682410"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/25cac8a302626f59ca84fa3339e2506c3ac761bc"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/299f5baa1321a0951cc3ebbacc72b67433a65391"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/4d920852c0a3cfbcb42bcd2680b091f5c0072fc2"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/7795037f15289ac1ed620603511b67d820a93762"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/c3f4e407661542d1d284fc889cf9f27afd11b3d3"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/ed08497977820e002a62cb114440f365cc7a087f"}],"remediation":[],"revision":"0bf2fbb990b6f75015dc42022afc553c389f28218aec49658f8ad865184a45d9","sources":[{"modifiedAt":1793984119851,"name":"CNA: Linux","retrievedAt":1793986036823,"url":"https://www.cve.org/CVERecord?id=CVE-2026-72087"},{"modifiedAt":1793985576827,"name":"NVD","retrievedAt":1793989684659,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72087"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986081231,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-72087"}],"ssvc":{"assessedAt":1793983884796,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()","updatedAt":1793989684659}