Not yet scoredPublished Aug 15, 2026

CVE-2026-72039bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()

Updated under an hour ago (Oct 27, 2026, 7:30 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() If the allocation of fp[i].tpa_info fails, the error path will not free the struct bnx2x_fastpath allocated earlier, as it is not linked to the bp structure yet. Fix that by linking it immediately after allocation.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 before 58594ed2a2f859ffb93edbbfa4aabb7739bea383; from 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 before c51b280b9cd3c9e97bf2cde33bb795c511f09669; 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 builds before 6d46eaa1e4c078ad674908e24b86e431a7fd4b15; 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 builds before 5576ee19a6a4aa111c61ce974e70bb79e7bb3952; 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 builds before 7d8d454b5d24dbad346cd57ef315e7bf1ee8e856; 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 builds before 6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403; from 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 before 356077547b1afa34a8ebae77176a577631a89041; from 15192a8cf8a8d16e0ff38a144c8a4630c94f9fd6 before a986fde914d88af47eb78fd29c5d1af7952c3500	CNA record

References

References

https://git.kernel.org/stable/c/58594ed2a2f859ffb93edbbfa4aabb7739bea383
https://git.kernel.org/stable/c/c51b280b9cd3c9e97bf2cde33bb795c511f09669
https://git.kernel.org/stable/c/6d46eaa1e4c078ad674908e24b86e431a7fd4b15
https://git.kernel.org/stable/c/5576ee19a6a4aa111c61ce974e70bb79e7bb3952
https://git.kernel.org/stable/c/7d8d454b5d24dbad346cd57ef315e7bf1ee8e856
https://git.kernel.org/stable/c/6c98ccdb9a0967e04a7b1866eb0d97c0c8c0e403
https://git.kernel.org/stable/c/356077547b1afa34a8ebae77176a577631a89041
https://git.kernel.org/stable/c/a986fde914d88af47eb78fd29c5d1af7952c3500

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.