0.0
NA
CVE-2026-72038
net: liquidio: fix BAR resource leak on PF number failure
Overview
Description
In the Linux kernel, the following vulnerability has been resolved: net: liquidio: fix BAR resource leak on PF number failure If cn23xx_get_pf_num() fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path. Found by manual code review.
Details
INFO
Published Date :
Aug. 15, 2026, 6:21 a.m.
Last Modified :
Aug. 17, 2026, 6:18 a.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
Unmap BAR resources before returning on failure to prevent resource leaks.
- Unmap both BARs before returning from the error path.
- Apply the Linux kernel patch for net: liquidio.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-72038.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-72038 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-72038
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-72038 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-72038 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 17, 2026
Action Type Old Value New Value Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '75b924759de9427761115301308c137904aa3f99', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '4a45884566bab4122bbeb8fff7d2d6b5fdbded24', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '020e52aee732bb08e6b89dd02bbf88895a50fffd', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': 'b74f293e5f38052cfa14710abfacd6b6561cc2d6', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': 'a22103618ee5b6ee884c374351f65fcdff7248f0', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '4140c516473a0e116ab3a73f9320c2aa5800210b', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': 'c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496', 'versionType': 'git'}], 'programFiles': ['drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.14'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.14', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.261', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '75b924759de9427761115301308c137904aa3f99', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '4a45884566bab4122bbeb8fff7d2d6b5fdbded24', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '020e52aee732bb08e6b89dd02bbf88895a50fffd', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': 'b74f293e5f38052cfa14710abfacd6b6561cc2d6', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': 'a22103618ee5b6ee884c374351f65fcdff7248f0', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '4140c516473a0e116ab3a73f9320c2aa5800210b', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': 'c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496', 'versionType': 'git'}], 'programFiles': ['drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.14'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.14', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.261', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c'], 'defaultStatus': 'affected'}] -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Aug. 15, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '75b924759de9427761115301308c137904aa3f99', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '4a45884566bab4122bbeb8fff7d2d6b5fdbded24', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '020e52aee732bb08e6b89dd02bbf88895a50fffd', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': 'b74f293e5f38052cfa14710abfacd6b6561cc2d6', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': 'a22103618ee5b6ee884c374351f65fcdff7248f0', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': '4140c516473a0e116ab3a73f9320c2aa5800210b', 'versionType': 'git'}, {'status': 'affected', 'version': '0c45d7fe12c7e1510bae9dfac189c8b927e4636b', 'lessThan': 'c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496', 'versionType': 'git'}], 'programFiles': ['drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.14'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.14', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.261', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.212', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.178', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.145', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.97', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.40', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.1.5', 'versionType': 'semver', 'lessThanOrEqual': '7.1.*'}, {'status': 'unaffected', 'version': '7.2-rc2', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/net/ethernet/cavium/liquidio/cn23xx_pf_device.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: net: liquidio: fix BAR resource leak on PF number failure If cn23xx_get_pf_num() fails, the function returns without unmapping either BAR. Unmap both BARs before returning from the error path. Found by manual code review. Added Reference https://git.kernel.org/stable/c/020e52aee732bb08e6b89dd02bbf88895a50fffd Added Reference https://git.kernel.org/stable/c/4140c516473a0e116ab3a73f9320c2aa5800210b Added Reference https://git.kernel.org/stable/c/4a45884566bab4122bbeb8fff7d2d6b5fdbded24 Added Reference https://git.kernel.org/stable/c/715cce38424fb2488ef2c5e6e6ffbfe1b74a9e67 Added Reference https://git.kernel.org/stable/c/75b924759de9427761115301308c137904aa3f99 Added Reference https://git.kernel.org/stable/c/a22103618ee5b6ee884c374351f65fcdff7248f0 Added Reference https://git.kernel.org/stable/c/b74f293e5f38052cfa14710abfacd6b6561cc2d6 Added Reference https://git.kernel.org/stable/c/c63ee62a3c4ac1a1542f4c1a4b87e2f41df5a496
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.