CVE-2026-72050 in Linux

Summary

by MITRE • 08/15/2026

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Free BPID bitmap on setup failure

nix_setup_bpids() allocates bp->bpids with rvu_alloc_bitmap(), which uses a plain kcalloc(). If any of the following devm_kcalloc() allocations for the BPID mapping arrays fails, the function returns without freeing the bitmap. Free the BPID bitmap before returning from those error paths.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: Linux
• Reservation: 08/09/2026
• Disclosure: 08/15/2026
• Moderation: accepted
• Entry: VDB-390463
• CPE: ready
• CWE: CWE-770 (confirmed)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Energy, Insurance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-72050
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-72050
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-72050/