CVE-2026-72448

Received Received - Intake

Memory Leak in Linux Kernel OcteonTX2 PF Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix leak of SQ timestamp buffer on teardown The send-queue timestamp ring is allocated with qmem_alloc() when timestamping is used, but otx2_free_sq_res() never freed sq->timestamps, leaking that memory across ifdown and device removal. Add the missing qmem_free() alongside the other SQ companion buffers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72448

EUVD

EUVD-2026-59347

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a memory leak in the octeontx2-pf driver. When timestamping is enabled, a buffer for send-queue timestamps is allocated but never freed during teardown, such as when the network interface is brought down or the device is removed. This causes the memory to leak.

Detection Guidance

This vulnerability involves a memory leak in the Linux kernel's octeontx2-pf driver when timestamping is used. Detection requires checking for memory leaks in the send-queue timestamp buffer during device operations. Use kernel logs for errors related to octeontx2-pf or memory leaks. Commands like dmesg | grep octeontx2 or dmesg | grep leak may help identify issues.

Impact Analysis

The memory leak could lead to gradual exhaustion of system memory over time, potentially causing performance degradation or system instability. It primarily affects systems using the octeontx2-pf network driver with timestamping enabled.

Compliance Impact

This vulnerability involves a memory leak in the Linux kernel's octeontx2-pf driver, specifically in the send-queue timestamp buffer. While it does not directly impact data privacy or security controls, memory leaks can lead to system instability or crashes, which may indirectly affect compliance by disrupting logging, monitoring, or audit functions required by standards like GDPR or HIPAA.

Mitigation Strategies

Apply the latest Linux kernel patches that include the fix for this vulnerability. Reboot the system after applying patches to ensure the updated kernel is active. Monitor kernel logs for any signs of memory leaks or errors related to octeontx2-pf after applying fixes.

Hi! I’m here to help you understand CVE-2026-72448. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70