CVE-2026-72050

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses a plain kcalloc(). If any of the following devm_kcalloc() allocations for the BPID mapping arrays fails, the function returns without freeing the bitmap. Free the BPID bitmap before returning from those error paths.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/19c148cb82d11bb7cc7d86038a94e608a297e63c
https://git.kernel.org/stable/c/36323f54cd323122a1be89ab2c316a6e55a94e30
https://git.kernel.org/stable/c/7a939b683a74bd7d7ce4e3b7f696b491c8d71af4
https://git.kernel.org/stable/c/d0c880c9f4051100517040d065caff60e913b659

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:21

Updated : 2026-08-17 06:18

NVD link : CVE-2026-72050

Mitre link : CVE-2026-72050

CVE.ORG link : CVE-2026-72050

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72050", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "d6212d2e41a0cb1ff6b059db79c70752cdafc95e", "lessThan": "7a939b683a74bd7d7ce4e3b7f696b491c8d71af4", "versionType": "git"}, {"status": "affected", "version": "d6212d2e41a0cb1ff6b059db79c70752cdafc95e", "lessThan": "19c148cb82d11bb7cc7d86038a94e608a297e63c", "versionType": "git"}, {"status": "affected", "version": "d6212d2e41a0cb1ff6b059db79c70752cdafc95e", "lessThan": "d0c880c9f4051100517040d065caff60e913b659", "versionType": "git"}, {"status": "affected", "version": "d6212d2e41a0cb1ff6b059db79c70752cdafc95e", "lessThan": "36323f54cd323122a1be89ab2c316a6e55a94e30", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/marvell/octeontx2/af/rvu_nix.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.9"}, {"status": "unaffected", "version": "0", "lessThan": "6.9", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/marvell/octeontx2/af/rvu_nix.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:21:14.323", "references": [{"url": "https://git.kernel.org/stable/c/19c148cb82d11bb7cc7d86038a94e608a297e63c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/36323f54cd323122a1be89ab2c316a6e55a94e30", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/7a939b683a74bd7d7ce4e3b7f696b491c8d71af4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d0c880c9f4051100517040d065caff60e913b659", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: Free BPID bitmap on setup failure\n\nnix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses\na plain kcalloc(). If any of the following devm_kcalloc() allocations for\nthe BPID mapping arrays fails, the function returns without freeing the\nbitmap. Free the BPID bitmap before returning from those error paths."}], "lastModified": "2026-08-17T06:18:03.123", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}