CVE-2026-45872

Analyzed Analyzed - Analysis Complete

Memory Leak in Linux Kernel scsi:smartpqi Driver

Publication date: 2026-05-27

Last updated on: 2026-06-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() pqi_report_phys_luns() fails to release the rpl_list buffer when encountering an unsupported data format or when the allocation for rpl_16byte_wwid_list fails. These early returns bypass the cleanup logic, leading to memory leaks. Consolidate the error handling by adding an out_free_rpl_list label and use goto statements to ensure rpl_list is consistently freed on failure. Compile tested only. Issue found using a prototype static analysis tool and code review.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-06-25

Generated

2026-07-06

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2026-45872

EUVD

EUVD-2026-32338

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.14 (exc)
linux	linux_kernel	From 6.19 (inc) to 6.19.4 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.128 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.75 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.165 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's scsi smartpqi driver, specifically in the function pqi_report_phys_luns(). The function fails to release a memory buffer called rpl_list when it encounters an unsupported data format or when memory allocation for rpl_16byte_wwid_list fails. Because of these early returns, the cleanup logic is bypassed, causing a memory leak.

The fix involves consolidating error handling by adding a label (out_free_rpl_list) and using goto statements to ensure that the rpl_list buffer is always freed on failure, preventing the memory leak.

Impact Analysis

This vulnerability can lead to memory leaks in the Linux kernel when the affected function encounters certain error conditions. Over time, these leaks could cause increased memory usage, potentially degrading system performance or leading to system instability if the leaks accumulate significantly.

Mitigation Strategies

The vulnerability is a memory leak in the Linux kernel's smartpqi driver related to the pqi_report_phys_luns() function. Immediate mitigation involves updating or patching the Linux kernel to a version where this issue is fixed.

Specifically, ensure your system is running a kernel version that includes the fix which consolidates error handling by adding an out_free_rpl_list label and uses goto statements to consistently free the rpl_list buffer on failure.

Compliance Impact

The provided information does not specify any impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Hi! I’m here to help you understand CVE-2026-45872. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70