---
id: CVE-2026-72039
title: 'bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()

  If the allocation of fp[i].tpa_info fails, the error path will not free
  the struct bnx2x_fastpath allocated ea…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 <
    58594ed2a2f859ffb93edbbfa4aabb7739bea383
  - >-
    Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 <
    c51b280b9cd3c9e97bf2cde33bb795c511f09669
  - >-
    Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 <
    6d46eaa1e4c078ad674908e24b86e431a7fd4b15
  - >-
    Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 <
    5576ee19a6a4aa111c61ce974e70bb79e7bb3952
  - >-
    Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 <
    7d8d454b5d24dbad346cd57ef315e7bf1ee8e856
  - >-
    Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 <
    6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403
  - >-
    Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 <
    356077547b1afa34a8ebae77176a577631a89041
  - >-
    Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 <
    a986fde914d88af47eb78fd29c5d1af7952c3500
  - Linux 3.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:50:39.239953Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:18.594Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72039'
references:
  - url: 'https://git.kernel.org/stable/c/58594ed2a2f859ffb93edbbfa4aabb7739bea383'
  - url: 'https://git.kernel.org/stable/c/c51b280b9cd3c9e97bf2cde33bb795c511f09669'
  - url: 'https://git.kernel.org/stable/c/6d46eaa1e4c078ad674908e24b86e431a7fd4b15'
  - url: 'https://git.kernel.org/stable/c/5576ee19a6a4aa111c61ce974e70bb79e7bb3952'
  - url: 'https://git.kernel.org/stable/c/7d8d454b5d24dbad346cd57ef315e7bf1ee8e856'
  - url: 'https://git.kernel.org/stable/c/6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403'
  - url: 'https://git.kernel.org/stable/c/356077547b1afa34a8ebae77176a577631a89041'
  - url: 'https://git.kernel.org/stable/c/a986fde914d88af47eb78fd29c5d1af7952c3500'
tags:
  - cve.org
epss: 0.0022
epssPercentile: 0.12543
ingestedAt: '2026-11-06T18:00:12.599Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()

If the allocation of fp[i].tpa_info fails, the error path will not free
the struct bnx2x_fastpath allocated earlier, as it is not linked to the
bp structure yet. Fix that by linking it immediately after allocation.

## Affected

- `Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 < 58594ed2a2f859ffb93edbbfa4aabb7739bea383`
- `Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 < c51b280b9cd3c9e97bf2cde33bb795c511f09669`
- `Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 < 6d46eaa1e4c078ad674908e24b86e431a7fd4b15`
- `Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 < 5576ee19a6a4aa111c61ce974e70bb79e7bb3952`
- `Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 < 7d8d454b5d24dbad346cd57ef315e7bf1ee8e856`
- `Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 < 6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403`
- `Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 < 356077547b1afa34a8ebae77176a577631a89041`
- `Linux >= 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 < a986fde914d88af47eb78fd29c5d1af7952c3500`
- `Linux 3.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.