SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-72038

UNKNOWN · CVSS N/A EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel, specifically in the LiquidIO network driver, where a failure in the `cn23xx_get_pf_num()` function can lead to a resource leak by not unmapping both Base Address Registers (BARs) before returning. This could result in memory management issues and potential denial of service. Organizations using affected versions of the Linux kernel, particularly those relying on LiquidIO network interfaces, should prioritize applying the fix to mitigate these risks.

CVE
CVE-2026-72038
Severity
UNKNOWN
CVSS
N/A
EPSS
0.21%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: fix BAR resource leak on PF number failure If cn23xx_get_pf_num() fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path. Found by manual code review.