{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-72088",
  "modified": "2026-10-07T17:22:01Z",
  "upstream": [
    "CVE-2026-72088"
  ],
  "published": "2026-08-15T06:04:33Z",
  "summary": "scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path\n\nIf phys_disk->in_reset is set, the function returns directly without\nundoing the resources acquired for the command. Add the missing error\ncleanup by unmapping the IOACCEL2 SG chain block when needed, unmapping\nthe SCSI command, and dropping the outstanding IOACCEL command count\nbefore returning.",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:12",
        "name": "linux"
      },
      "versions": [
        "1:6.1.47-1+rpt4"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-2712",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v6",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7l",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v8",
            "binary_version": "1:6.1.47-1+rpt4"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.1.47-1+rpt4": {
            "linux_commit": "655fc658a15ae7a6f37103754adb39ba52a9a14e",
            "upstream_version": "6.1.47",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.1.178",
            "compiled_filter": false
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-72088"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/fca5edd748f00e87f2dd55a6333722b46af30e74"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/fb40928c59329a50eadb3ce8bfd7a67f490a6212"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/018cbce6ee158244bb76cf638e8e3054e240aea9"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/a61de4d7e22a9ab9a90094d0e180b378e09a1d2c"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/e7bde072cceefc564413b46d64017c47a2e9977d"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/d495b403d5b357dfe506b963bd7a78ecd5c7b667"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/782e1bf48672be44265c48e14602696c3c8ed904"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/e166bafc483e927150cb9b5f286c9191ea0df84e"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-08-17T05:24:08Z"
  }
}