CVE-2026-72040

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A reference count leak exists in the i ipmi request() function. When a caller provides a supplied recv message, the function increments the nr msgs reference count. If an error occurs, the cleanup path fails to release the reference when supplied recv is used, as the caller ipmi request supply msgs() also does not release it. This results in a permanent reference leak.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.