---
id: CVE-2026-72088
title: 'scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

  If phys_disk->in_reset is set, the function returns directly without
  undoing the resources acquired for the com…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d <
    fca5edd748f00e87f2dd55a6333722b46af30e74
  - >-
    Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d <
    fb40928c59329a50eadb3ce8bfd7a67f490a6212
  - >-
    Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d <
    018cbce6ee158244bb76cf638e8e3054e240aea9
  - >-
    Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d <
    a61de4d7e22a9ab9a90094d0e180b378e09a1d2c
  - >-
    Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d <
    e7bde072cceefc564413b46d64017c47a2e9977d
  - >-
    Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d <
    d495b403d5b357dfe506b963bd7a78ecd5c7b667
  - >-
    Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d <
    782e1bf48672be44265c48e14602696c3c8ed904
  - >-
    Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d <
    e166bafc483e927150cb9b5f286c9191ea0df84e
  - Linux 5.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:51:29.337917Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:20.025Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72088'
references:
  - url: 'https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74'
  - url: 'https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212'
  - url: 'https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9'
  - url: 'https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c'
  - url: 'https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d'
  - url: 'https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667'
  - url: 'https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904'
  - url: 'https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e'
tags:
  - cve.org
epss: 0.0022
epssPercentile: 0.1254
ingestedAt: '2026-11-06T18:00:12.596Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path

If phys_disk->in_reset is set, the function returns directly without
undoing the resources acquired for the command. Add the missing error
cleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping
the SCSI command, and dropping the outstanding IOACCEL command count
before returning.

## Affected

- `Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d < fca5edd748f00e87f2dd55a6333722b46af30e74`
- `Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d < fb40928c59329a50eadb3ce8bfd7a67f490a6212`
- `Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d < 018cbce6ee158244bb76cf638e8e3054e240aea9`
- `Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d < a61de4d7e22a9ab9a90094d0e180b378e09a1d2c`
- `Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d < e7bde072cceefc564413b46d64017c47a2e9977d`
- `Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d < d495b403d5b357dfe506b963bd7a78ecd5c7b667`
- `Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d < 782e1bf48672be44265c48e14602696c3c8ed904`
- `Linux >= c5dfd106414f3e038fee5c6f0800fd55ed07b41d < e166bafc483e927150cb9b5f286c9191ea0df84e`
- `Linux 5.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.