In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()

The memory allocated for mboxq using mempool_alloc() is not freed in
some of the early exit error paths. Fix that by moving the
mempool_free() call to an earlier point after last use.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 affected < 299f5baa1321a0951cc3ebbacc72b67433a65391
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 affected < c3f4e407661542d1d284fc889cf9f27afd11b3d3
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 affected < 25cac8a302626f59ca84fa3339e2506c3ac761bc
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 affected < ed08497977820e002a62cb114440f365cc7a087f
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 affected < 0ce5a37f7ddf2fc12210e8700350274da79fbb3a
d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 affected < 1bd28625e25be549ee7c47532e7c3ef91c682410
Linux Linux affected
Version Status Constraints
5.4 affected —
0 unaffected < 5.4
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc4 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0ce5a37f7ddf2fc12210e8700350274da79fbb3a cve-icon cve-icon
https://git.kernel.org/stable/c/1bd28625e25be549ee7c47532e7c3ef91c682410 cve-icon cve-icon
https://git.kernel.org/stable/c/25cac8a302626f59ca84fa3339e2506c3ac761bc cve-icon cve-icon
https://git.kernel.org/stable/c/299f5baa1321a0951cc3ebbacc72b67433a65391 cve-icon cve-icon
https://git.kernel.org/stable/c/c3f4e407661542d1d284fc889cf9f27afd11b3d3 cve-icon cve-icon
https://git.kernel.org/stable/c/ed08497977820e002a62cb114440f365cc7a087f cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() The memory allocated for mboxq using mempool_alloc() is not freed in some of the early exit error paths. Fix that by moving the mempool_free() call to an earlier point after last use.
Title scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:52:35.513Z

Reserved: 2026-08-09T03:40:39.905Z

Link: CVE-2026-72087

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:22.723

Modified: 2026-08-15T06:21:22.723

Link: CVE-2026-72087

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.