{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"fca5edd748f00e87f2dd55a6333722b46af30e74","status":"affected","version":"c5dfd106414f3e038fee5c6f0800fd55ed07b41d","versionType":"git"},{"lessThan":"fb40928c59329a50eadb3ce8bfd7a67f490a6212","status":"affected","version":"c5dfd106414f3e038fee5c6f0800fd55ed07b41d","versionType":"git"},{"lessThan":"018cbce6ee158244bb76cf638e8e3054e240aea9","status":"affected","version":"c5dfd106414f3e038fee5c6f0800fd55ed07b41d","versionType":"git"},{"lessThan":"a61de4d7e22a9ab9a90094d0e180b378e09a1d2c","status":"affected","version":"c5dfd106414f3e038fee5c6f0800fd55ed07b41d","versionType":"git"},{"lessThan":"e7bde072cceefc564413b46d64017c47a2e9977d","status":"affected","version":"c5dfd106414f3e038fee5c6f0800fd55ed07b41d","versionType":"git"},{"lessThan":"d495b403d5b357dfe506b963bd7a78ecd5c7b667","status":"affected","version":"c5dfd106414f3e038fee5c6f0800fd55ed07b41d","versionType":"git"},{"lessThan":"782e1bf48672be44265c48e14602696c3c8ed904","status":"affected","version":"c5dfd106414f3e038fee5c6f0800fd55ed07b41d","versionType":"git"},{"lessThan":"e166bafc483e927150cb9b5f286c9191ea0df84e","status":"affected","version":"c5dfd106414f3e038fee5c6f0800fd55ed07b41d","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"5.3"},{"lessThan":"5.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.145","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.40","versionType":"semver"},{"lessThanOrEqual":"7.1.*","status":"unaffected","version":"7.1.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.2","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-72088","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path\n\nIf phys_disk->in_reset is set, the function returns directly without\nundoing the resources acquired for the command. Add the missing error\ncleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping\nthe SCSI command, and dropping the outstanding IOACCEL command count\nbefore returning.","epss":{"date":"2026-11-06","percentile":0.12551,"score":0.0022},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793985577007,"publishedAt":1786773156155,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212"},{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"url":"https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74"}],"remediation":[],"revision":"7aed2e365a9c9376dcdf9ba114cf1874f7e04d4c63071083603bb2d8cc177d6a","sources":[{"modifiedAt":1793984120025,"name":"CNA: Linux","retrievedAt":1793986038251,"url":"https://www.cve.org/CVERecord?id=CVE-2026-72088"},{"modifiedAt":1793985577007,"name":"NVD","retrievedAt":1793989685332,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72088"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793986080764,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-72088"}],"ssvc":{"assessedAt":1793983889337,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path","updatedAt":1793989685332}