CVE-2026-72050octeontx2-af: Free BPID bitmap on setup failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses a plain kcalloc(). If any of the following devm_kcalloc() allocations for the BPID mapping arrays fails, the function returns without freeing the bitmap. Free the BPID bitmap before returning from those error paths.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from d6212d2e41a0cb1ff6b059db79c70752cdafc95e before 7a939b683a74bd7d7ce4e3b7f696b491c8d71af4; from d6212d2e41a0cb1ff6b059db79c70752cdafc95e before 19c148cb82d11bb7cc7d86038a94e608a297e63c; from d6212d2e41a0cb1ff6b059db79c70752cdafc95e before d0c880c9f4051100517040d065caff60e913b659; from d6212d2e41a0cb1ff6b059db79c70752cdafc95e before 36323f54cd323122a1be89ab2c316a6e55a94e30 | CNA record |
References
- https://git.kernel.org/stable/c/7a939b683a74bd7d7ce4e3b7f696b491c8d71af4
- https://git.kernel.org/stable/c/19c148cb82d11bb7cc7d86038a94e608a297e63c
- https://git.kernel.org/stable/c/d0c880c9f4051100517040d065caff60e913b659
- https://git.kernel.org/stable/c/36323f54cd323122a1be89ab2c316a6e55a94e30
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.