CVE-2026-72039bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() If the allocation of fp[i].tpa_info fails, the error path will not free the struct bnx2x_fastpath allocated earlier, as it is not linked to the bp structure yet. Fix that by linking it immediately after allocation.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 before 58594ed2a2f859ffb93edbbfa4aabb7739bea383; from 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 before c51b280b9cd3c9e97bf2cde33bb795c511f09669; 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 builds before 6d46eaa1e4c078ad674908e24b86e431a7fd4b15; 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 builds before 5576ee19a6a4aa111c61ce974e70bb79e7bb3952; 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 builds before 7d8d454b5d24dbad346cd57ef315e7bf1ee8e856; 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 builds before 6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403; from 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 before 356077547b1afa34a8ebae77176a577631a89041; from 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 before a986fde914d88af47eb78fd29c5d1af7952c3500 | CNA record |
References
- https://git.kernel.org/stable/c/58594ed2a2f859ffb93edbbfa4aabb7739bea383
- https://git.kernel.org/stable/c/c51b280b9cd3c9e97bf2cde33bb795c511f09669
- https://git.kernel.org/stable/c/6d46eaa1e4c078ad674908e24b86e431a7fd4b15
- https://git.kernel.org/stable/c/5576ee19a6a4aa111c61ce974e70bb79e7bb3952
- https://git.kernel.org/stable/c/7d8d454b5d24dbad346cd57ef315e7bf1ee8e856
- https://git.kernel.org/stable/c/6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403
- https://git.kernel.org/stable/c/356077547b1afa34a8ebae77176a577631a89041
- https://git.kernel.org/stable/c/a986fde914d88af47eb78fd29c5d1af7952c3500
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.