In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Free BPID bitmap on setup failure

nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses
a plain kcalloc(). If any of the following devm_kcalloc() allocations for
the BPID mapping arrays fails, the function returns without freeing the
bitmap. Free the BPID bitmap before returning from those error paths.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.002.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d6212d2e41a0cb1ff6b059db79c70752cdafc95e affected < 7a939b683a74bd7d7ce4e3b7f696b491c8d71af4
d6212d2e41a0cb1ff6b059db79c70752cdafc95e affected < 19c148cb82d11bb7cc7d86038a94e608a297e63c
d6212d2e41a0cb1ff6b059db79c70752cdafc95e affected < d0c880c9f4051100517040d065caff60e913b659
d6212d2e41a0cb1ff6b059db79c70752cdafc95e affected < 36323f54cd323122a1be89ab2c316a6e55a94e30
Linux Linux affected
Version Status Constraints
6.9 affected —
0 unaffected < 6.9
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/19c148cb82d11bb7cc7d86038a94e608a297e63c cve-icon cve-icon
https://git.kernel.org/stable/c/36323f54cd323122a1be89ab2c316a6e55a94e30 cve-icon cve-icon
https://git.kernel.org/stable/c/7a939b683a74bd7d7ce4e3b7f696b491c8d71af4 cve-icon cve-icon
https://git.kernel.org/stable/c/d0c880c9f4051100517040d065caff60e913b659 cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses a plain kcalloc(). If any of the following devm_kcalloc() allocations for the BPID mapping arrays fails, the function returns without freeing the bitmap. Free the BPID bitmap before returning from those error paths.
Title octeontx2-af: Free BPID bitmap on setup failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:52:07.709Z

Reserved: 2026-08-09T03:40:39.902Z

Link: CVE-2026-72050

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:21:14.323

Modified: 2026-08-15T06:21:14.323

Link: CVE-2026-72050

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T11:30:06Z

Weaknesses

No weakness.