What’s Vulnerable › Vulnerabilities

CVE-2026-72088: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path If phys_disk->in_reset is set, the function returns directly without undoing the resources acquired for the command. Add the missing error cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping the SCSI command, and dropping the outstanding IOACCEL command count before returning.

Affected products

• Linux kernel: 5.3 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9
• https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904
• https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c
• https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667
• https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e
• https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d
• https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212
• https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74

Get alerted when CVE-2026-72088 or the next vulnerability affects your stack