CVE-2026-72032
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hws_bwc_matcher_move() allocates a replacement matcher before setting it as the resize target. If mlx5hws_matcher_resize_set_target() fails, the replacement matcher is not attached anywhere and is leaked. Fix the leak by destroying the replacement matcher before returning from the resize-target failure path. The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1.1. An x86_64 allyesconfig build showed no new warnings. As we do not have a mlx5 HWS-capable device to test with, no runtime testing was able to be performed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72032
EUVD
EUVD-2026-58990

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 7.1.1 (exc)
linux linux_kernel to 6.13-rc1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's net/mlx5 HWS component. It involves a memory leak where a matcher object is not properly freed when a resize operation fails. Specifically, during a resize, a replacement matcher is allocated but if the resize target setup fails, the matcher is left unattached and leaked.

Detection Guidance

This vulnerability is specific to the Linux kernel's mlx5 HWS (Hardware Switching) subsystem and may not have direct detection commands. Manual inspection of kernel logs or memory usage patterns related to mlx5 HWS operations could help identify leaks. Check for kernel messages indicating matcher allocation failures or memory leaks in the net/mlx5 subsystem.

Impact Analysis

This vulnerability could lead to memory exhaustion over time as leaked matchers accumulate. It may cause system instability or crashes due to excessive memory usage, particularly in systems using the mlx5 HWS feature.

Mitigation Strategies

Apply the latest kernel patches or updates that include the fix for this vulnerability. Monitor kernel logs for matcher-related errors or memory leaks in the mlx5 HWS subsystem. If using a vulnerable kernel version, avoid operations that trigger matcher resizing in net/mlx5 until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72032. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart