CVE-2026-72038 - Vulnerability Details

- net: liquidio: fix BAR resource leak on PF number failure

Description

In the Linux kernel, the following vulnerability has been resolved:

net: liquidio: fix BAR resource leak on PF number failure

If cn23xx_get_pf_num() fails, the function returns without
unmapping either BAR. Unmap both BARs before returning from
the error path.

Found by manual code review.

Published: 2026-08-15

Score: n/a

EPSS: n/a

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`0c45d7fe12c7e1510bae9dfac189c8b927e4636b`	affected	< 75b924759de9427761115301308c137904aa3f99
`0c45d7fe12c7e1510bae9dfac189c8b927e4636b`	affected	< 4a45884566bab4122bbeb8fff7d2d6b5fdbded24
`0c45d7fe12c7e1510bae9dfac189c8b927e4636b`	affected	< 020e52aee732bb08e6b89dd02bbf88895a50fffd
`0c45d7fe12c7e1510bae9dfac189c8b927e4636b`	affected	< b74f293e5f38052cfa14710abfacd6b6561cc2d6
`0c45d7fe12c7e1510bae9dfac189c8b927e4636b`	affected	< a22103618ee5b6ee884c374351f65fcdff7248f0
`0c45d7fe12c7e1510bae9dfac189c8b927e4636b`	affected	< 715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67
`0c45d7fe12c7e1510bae9dfac189c8b927e4636b`	affected	< 4140c516473a0e116ab3a73f9320c2aa5800210b
`0c45d7fe12c7e1510bae9dfac189c8b927e4636b`	affected	< c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496

Linux

affected

Version	Status	Constraints
`4.14`	affected	—
`0`	unaffected	< 4.14
`5.10.261`	unaffected	≤ 5.10.*
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2-rc2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[0c45d7fe12c7e1510bae9dfac189c8b927e4636b,75b924759de9427761115301308c137904aa3f99)`	affected	code_commit	—
`[0c45d7fe12c7e1510bae9dfac189c8b927e4636b,4a45884566bab4122bbeb8fff7d2d6b5fdbded24)`	affected	code_commit	—
`[0c45d7fe12c7e1510bae9dfac189c8b927e4636b,020e52aee732bb08e6b89dd02bbf88895a50fffd)`	affected	code_commit	—
`[0c45d7fe12c7e1510bae9dfac189c8b927e4636b,b74f293e5f38052cfa14710abfacd6b6561cc2d6)`	affected	code_commit	—
`[0c45d7fe12c7e1510bae9dfac189c8b927e4636b,a22103618ee5b6ee884c374351f65fcdff7248f0)`	affected	code_commit	—
`[0c45d7fe12c7e1510bae9dfac189c8b927e4636b,715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67)`	affected	code_commit	—
`[0c45d7fe12c7e1510bae9dfac189c8b927e4636b,4140c516473a0e116ab3a73f9320c2aa5800210b)`	affected	code_commit	—
`[0c45d7fe12c7e1510bae9dfac189c8b927e4636b,c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`4.14`	affected	generic	—
`[0,4.14)`	unaffected	generic	—
`[5.10.261,5.11.0)`	unaffected	semver	—
`[5.15.212,5.16.0)`	unaffected	semver	—
`[6.1.178,6.2.0)`	unaffected	semver	—
`[6.6.145,6.7.0)`	unaffected	semver	—
`[6.12.97,6.13.0)`	unaffected	semver	—
`[6.18.40,6.19.0)`	unaffected	semver	—
`[7.1.5,7.2.0)`	unaffected	semver	—
`[7.2-rc2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/020e52aee732bb08e6b89dd02bbf88895a50fffd
https://git.kernel.org/stable/c/4140c516473a0e116ab3a73f9320c2aa5800210b
https://git.kernel.org/stable/c/4a45884566bab4122bbeb8fff7d2d6b5fdbded24
https://git.kernel.org/stable/c/715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67
https://git.kernel.org/stable/c/75b924759de9427761115301308c137904aa3f99
https://git.kernel.org/stable/c/a22103618ee5b6ee884c374351f65fcdff7248f0
https://git.kernel.org/stable/c/b74f293e5f38052cfa14710abfacd6b6561cc2d6
https://git.kernel.org/stable/c/c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496

History

Sat, 15 Aug 2026 08:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-464 CWE-471

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: net: liquidio: fix BAR resource leak on PF number failure If cn23xx_get_pf_num() fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path. Found by manual code review.
Title		net: liquidio: fix BAR resource leak on PF number failure
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/020e52aee732bb08e6b89dd02bbf88895a50fffd https://git.kernel.org/stable/c/4140c516473a0e116ab3a73f9320c2aa5800210b https://git.kernel.org/stable/c/4a45884566bab4122bbeb8fff7d2d6b5fdbded24 https://git.kernel.org/stable/c/715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67 https://git.kernel.org/stable/c/75b924759de9427761115301308c137904aa3f99 https://git.kernel.org/stable/c/a22103618ee5b6ee884c374351f65fcdff7248f0 https://git.kernel.org/stable/c/b74f293e5f38052cfa14710abfacd6b6561cc2d6 https://git.kernel.org/stable/c/c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:51:58.487Z

Updated: 2026-08-15T05:51:58.487Z

Reserved: 2026-08-09T03:40:39.901Z

Link: CVE-2026-72038

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:21:12.860

Modified: 2026-08-15T06:21:12.860

Link: CVE-2026-72038

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-08-15T10:15:02Z

Weaknesses

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object