{"cve":"CVE-2026-72088","nvd":{"published":"2026-08-15T06:21:22.843","modified":"2026-08-17T06:18:07.720","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path\n\nIf phys_disk->in_reset is set, the function returns directly without\nundoing the resources acquired for the command. Add the missing error\ncleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping\nthe SCSI command, and dropping the outstanding IOACCEL command count\nbefore returning.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9","https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904","https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c","https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667","https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:48:17.459049833+00:00"},"epss":{"cve":"CVE-2026-72088","score":0.0022,"percentile":0.12527,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}