Strix
57.3K

CVE-2026-72038

UnknownEPSS 0.21%

Last modified

CVE-2026-72038 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net: liquidio: fix BAR resource leak on PF number failure If cn23xx_get_pf_num() fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path. Found by manual code review.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: net: liquidio: fix BAR resource leak on PF number failure If cn23xx_get_pf_num() fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path. Found by manual code review.

Metrics

EPSS Probability
0.21%

11.6th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 0c45d7fe12c7e1510bae9dfac189c8b927e4636b, < 75b924759de9427761115301308c137904aa3f99; >= 0c45d7fe12c7e1510bae9dfac189c8b927e4636b, < 4a45884566bab4122bbeb8fff7d2d6b5fdbded24; >= 0c45d7fe12c7e1510bae9dfac189c8b927e4636b, < 020e52aee732bb08e6b89dd02bbf88895a50fffd; >= 0c45d7fe12c7e1510bae9dfac189c8b927e4636b, < b74f293e5f38052cfa14710abfacd6b6561cc2d6; >= 0c45d7fe12c7e1510bae9dfac189c8b927e4636b, < a22103618ee5b6ee884c374351f65fcdff7248f0; >= 0c45d7fe12c7e1510bae9dfac189c8b927e4636b, < 715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67; >= 0c45d7fe12c7e1510bae9dfac189c8b927e4636b, < 4140c516473a0e116ab3a73f9320c2aa5800210b; >= 0c45d7fe12c7e1510bae9dfac189c8b927e4636b, < c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496
LinuxLinux4.14

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72038?
In the Linux kernel, the following vulnerability has been resolved: net: liquidio: fix BAR resource leak on PF number failure If cn23xx_get_pf_num() fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path. Found by manual code review.
How severe is CVE-2026-72038?
Severity scoring for CVE-2026-72038 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72038?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72038?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST