{"id":"CVE-2026-72087","title":"scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()\n\nThe memory allocated for mboxq using mempool_alloc() is not freed in\nsome of the early exit error path…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 4d920852c0a3cfbcb42bcd2680b091f5c0072fc2","Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 7795037f15289ac1ed620603511b67d820a93762","Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 299f5baa1321a0951cc3ebbacc72b67433a65391","Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < c3f4e407661542d1d284fc889cf9f27afd11b3d3","Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 25cac8a302626f59ca84fa3339e2506c3ac761bc","Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < ed08497977820e002a62cb114440f365cc7a087f","Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 0ce5a37f7ddf2fc12210e8700350274da79fbb3a","Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 1bd28625e25be549ee7c47532e7c3ef91c682410","Linux 5.4"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:51:24.796965Z"},"published":"2026-08-15","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:55:19.851Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72087","references":[{"url":"https://git.kernel.org/stable/c/4d920852c0a3cfbcb42bcd2680b091f5c0072fc2"},{"url":"https://git.kernel.org/stable/c/7795037f15289ac1ed620603511b67d820a93762"},{"url":"https://git.kernel.org/stable/c/299f5baa1321a0951cc3ebbacc72b67433a65391"},{"url":"https://git.kernel.org/stable/c/c3f4e407661542d1d284fc889cf9f27afd11b3d3"},{"url":"https://git.kernel.org/stable/c/25cac8a302626f59ca84fa3339e2506c3ac761bc"},{"url":"https://git.kernel.org/stable/c/ed08497977820e002a62cb114440f365cc7a087f"},{"url":"https://git.kernel.org/stable/c/0ce5a37f7ddf2fc12210e8700350274da79fbb3a"},{"url":"https://git.kernel.org/stable/c/1bd28625e25be549ee7c47532e7c3ef91c682410"}],"tags":["cve.org"],"epss":0.0022,"epssPercentile":0.126,"ingestedAt":"2026-11-06T18:00:12.597Z","slug":"CVE-2026-72087","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()\n\nThe memory allocated for mboxq using mempool_alloc() is not freed in\nsome of the early exit error paths. Fix that by moving the\nmempool_free() call to an earlier point after last use.\n\n## Affected\n\n- `Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 4d920852c0a3cfbcb42bcd2680b091f5c0072fc2`\n- `Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 7795037f15289ac1ed620603511b67d820a93762`\n- `Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 299f5baa1321a0951cc3ebbacc72b67433a65391`\n- `Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < c3f4e407661542d1d284fc889cf9f27afd11b3d3`\n- `Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 25cac8a302626f59ca84fa3339e2506c3ac761bc`\n- `Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < ed08497977820e002a62cb114440f365cc7a087f`\n- `Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 0ce5a37f7ddf2fc12210e8700350274da79fbb3a`\n- `Linux >= d79c9e9d4b3d9330ee38f392a7c98e0fc494f7f8 < 1bd28625e25be549ee7c47532e7c3ef91c682410`\n- `Linux 5.4`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}