Strix
57.3K

CVE-2026-72050

UnknownEPSS 0.20%

Last modified

CVE-2026-72050 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses a plain kcalloc(). If any of the following devm_kcalloc() allocations for the BPID mapping arrays fails, the function returns without freeing the bitmap. EPSS estimates a 0.20% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses a plain kcalloc(). If any of the following devm_kcalloc() allocations for the BPID mapping arrays fails, the function returns without freeing the bitmap. Free the BPID bitmap before returning from those error paths.

Metrics

EPSS Probability
0.20%

10.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= d6212d2e41a0cb1ff6b059db79c70752cdafc95e, < 7a939b683a74bd7d7ce4e3b7f696b491c8d71af4; >= d6212d2e41a0cb1ff6b059db79c70752cdafc95e, < 19c148cb82d11bb7cc7d86038a94e608a297e63c; >= d6212d2e41a0cb1ff6b059db79c70752cdafc95e, < d0c880c9f4051100517040d065caff60e913b659; >= d6212d2e41a0cb1ff6b059db79c70752cdafc95e, < 36323f54cd323122a1be89ab2c316a6e55a94e30
LinuxLinux6.9

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72050?
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses a plain kcalloc(). If any of the following devm_kcalloc() allocations for the BPID mapping arrays fails, the function returns without freeing the bitmap. Free the BPID bitmap before returning from those error paths.
How severe is CVE-2026-72050?
Severity scoring for CVE-2026-72050 is pending analysis. The EPSS model estimates a 0.20% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72050?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72050?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST