CVE-2026-72039: bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() If the allocation of fp[i].tpa_info fails, the error path will not free the struct bnx2x_fastpath allocated earlier, as it is not linked to the bp structure yet. Fix that by linking it immediately after allocation.

Affected products

Linux kernel: 3.6 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/356077547b1afa34a8ebae77176a577631a89041
https://git.kernel.org/stable/c/5576ee19a6a4aa111c61ce974e70bb79e7bb3952
https://git.kernel.org/stable/c/58594ed2a2f859ffb93edbbfa4aabb7739bea383
https://git.kernel.org/stable/c/6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403
https://git.kernel.org/stable/c/6d46eaa1e4c078ad674908e24b86e431a7fd4b15
https://git.kernel.org/stable/c/7d8d454b5d24dbad346cd57ef315e7bf1ee8e856
https://git.kernel.org/stable/c/a986fde914d88af47eb78fd29c5d1af7952c3500
https://git.kernel.org/stable/c/c51b280b9cd3c9e97bf2cde33bb795c511f09669

Get alerted when CVE-2026-72039 or the next vulnerability affects your stack