CVE-2026-72056
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX setup fails create_queues_with_size_backoff() creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error handling paths omit the teardown of the XDP TX queues, leading to a resource leak. Fix this by explicitly destroying the XDP TX queue subset at the two missing failure points. The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc7. An x86_64 allyesconfig build showed no new warnings. As we do not have an ENA device to test with, no runtime testing was able to be performed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72056
EUVD
EUVD-2026-59014

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel 7.1-rc7
linux linux_kernel 6.13-rc1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a resource leak in the ENA (Elastic Network Adapter) driver. When setting up network TX queues, the system first creates XDP TX queues before regular TX queues. If regular TX queue setup fails, the XDP TX queues are not properly cleaned up, leading to a resource leak.

Detection Guidance

This vulnerability may not have direct detection commands as it involves a resource leak in the Linux kernel's ENA driver. Check for kernel logs for errors related to ENA or XDP TX queue failures. Monitor system resource usage for unexpected increases in memory or queue allocations.

Impact Analysis

This vulnerability could lead to system resource exhaustion over time due to unmanaged memory or queue allocations. It may cause performance degradation or instability in systems using the ENA driver, particularly under heavy network load or during error conditions.

Mitigation Strategies

Apply the latest kernel patches that include the fix for this issue. If using a vulnerable kernel version, avoid enabling ENA XDP TX queues or disable the ENA driver if not required. Monitor system stability and resource usage after applying updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72056. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart