CVE-2026-72050

CVE-2026-72050

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Free BPID bitmap on setup failure

nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses

a plain kcalloc(). If any of the following devm_kcalloc() allocations for

the BPID mapping arrays fails, the function returns without freeing the

bitmap. Free the BPID bitmap before returning from those error paths.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-08-15T10:21Z
References (4)
https://git.kernel.org/stable/c/19c148cb82d11bb7cc7d86038a94e608a297e63c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/36323f54cd323122a1be89ab2c316a6e55a94e30 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7a939b683a74bd7d7ce4e3b7f696b491c8d71af4 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d0c880c9f4051100517040d065caff60e913b659 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:52Z
    octeontx2-af: Free BPID bitmap on setup failure
    cvelistv5