CVE-2026-72039
Received Received - Intake

Memory Leak in Linux Kernel bnx2x Driver

Vulnerability report for CVE-2026-72039, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() If the allocation of fp[i].tpa_info fails, the error path will not free the struct bnx2x_fastpath allocated earlier, as it is not linked to the bp structure yet. Fix that by linking it immediately after allocation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-17
Generated
2026-09-04
AI Q&A
2026-08-15
EPSS Evaluated
2026-09-03
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
bnx2x bnx2x *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a memory leak vulnerability in the Linux kernel's bnx2x network driver. When allocating memory for fp[i].tpa_info fails, the previously allocated struct bnx2x_fastpath is not freed because it is not yet linked to the bp structure. The fix ensures the structure is linked immediately after allocation to prevent the leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's bnx2x driver and involves a potential memory leak during allocation failures. Detection requires checking for kernel logs or memory usage anomalies related to the bnx2x driver. No direct commands are provided in the context, but monitoring for memory leaks or errors in the bnx2x driver logs may indicate exploitation or impact.

Impact Analysis

The vulnerability could lead to gradual memory exhaustion on systems using the affected bnx2x driver. This may cause performance degradation, system instability, or crashes due to running out of available memory over time.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a memory leak issue in the Linux kernel's bnx2x driver. Memory leaks typically impact system performance and stability rather than data protection or privacy compliance.

Mitigation Strategies

Apply the Linux kernel patch that resolves the bnx2x memory leak issue. Update to a patched kernel version where the fix for CVE-2026-72039 is included.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72039. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart