CVE-2026-72023
Detail
Received This CVE record has recently been published to the CVE List and has been included within the NVD dataset.
Description
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: fix SQB pointer leak on init failure
otx2_init_hw_resources() initializes SQ aura and pool resources before
several later setup steps. On failure, err_free_sq_ptrs only frees SQB
pages, leaving the per-SQ sqb_ptrs arrays behind.
Use otx2_free_sq_res() for the SQ unwind path and let it free sqb_ptrs
even when sq->sqe has not been allocated yet.
The bug was first flagged by an experimental analysis tool we are
developing for kernel memory-management bugs while analyzing
v6.13-rc1. The tool is still under development and is not yet publicly
available. Manual inspection confirms that the bug is still
present in v7.1.1.
An x86_64 allyesconfig build showed no new warnings. As we do not have an
OcteonTX2 PF device and the corresponding AF mailbox setup to test with,
no runtime testing was able to be performed.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
NVD assessment
not yet provided.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to [email protected]
Change History
3 change records found show changes
CVE Modified by kernel.org
8/23/2026 9:16:37 AM
Action
Type
Old Value
New Value
Added
Reference
https://git.kernel.org/stable/c/2cac2eac935ed7e0a9203204e036a1f6090ebc3d
Added
Reference
https://git.kernel.org/stable/c/42c2836f10ac0427dac9e9a923d6ee2189dec544
Added
Reference
https://git.kernel.org/stable/c/fca9c22633169a6c5d429a32e439121b6419e2be
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"148d7ec0a3a98839c320e6cdd112e2e88bfb091b","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5e023fe2569e630ba23b5558ebe4bf4837af4d16","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5df30f05db96552903680a17f858d250dfd9e86e","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"23d917acd9c9a9fd999688ec3fdde7aa58ab8a14","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"62e7df6d042aeebd5efb581074e28865c04477be","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.6","status":"affected"},{"version":"0","lessThan":"5.6","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.40","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Record truncated, showing 2048 of 2515 characters.
View Entire Change Record [{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"fca9c22633169a6c5d429a32e439121b6419e2be","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"42c2836f10ac0427dac9e9a923d6ee2189dec544","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"2cac2eac935ed7e0a9203204e036a1f6090ebc3d","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"148d7ec0a3a98839c320e6cdd112e2e88bfb091b","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5e023fe2569e630ba23b5558ebe4bf4837af4d16","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5df30f05db96552903680a17f858d250dfd9e86e","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"23d917acd9c9a9fd999688ec3fdde7aa58ab8a14","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"62e7df6d042aeebd5efb581074e28865c04477be","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.6","status":"affected"},{"version":"0","lessThan":"5.6","versionType":"semver","status":"unaffected"},{"version":"5.10.266","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.217","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.184","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version"
CVE Modified by kernel.org
8/17/2026 2:17:59 AM
Action
Type
Old Value
New Value
Changed
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"148d7ec0a3a98839c320e6cdd112e2e88bfb091b","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5e023fe2569e630ba23b5558ebe4bf4837af4d16","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5df30f05db96552903680a17f858d250dfd9e86e","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"23d917acd9c9a9fd999688ec3fdde7aa58ab8a14","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"62e7df6d042aeebd5efb581074e28865c04477be","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.6","status":"affected"},{"version":"0","lessThan":"5.6","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.40","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc3","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"148d7ec0a3a98839c320e6cdd112e2e88bfb091b","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5e023fe2569e630ba23b5558ebe4bf4837af4d16","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5df30f05db96552903680a17f858d250dfd9e86e","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"23d917acd9c9a9fd999688ec3fdde7aa58ab8a14","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"62e7df6d042aeebd5efb581074e28865c04477be","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.6","status":"affected"},{"version":"0","lessThan":"5.6","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.40","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
New CVE Received from kernel.org
8/15/2026 2:21:01 AM
Action
Type
Old Value
New Value
Added
Description
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: fix SQB pointer leak on init failure
otx2_init_hw_resources() initializes SQ aura and pool resources before
several later setup steps. On failure, err_free_sq_ptrs only frees SQB
pages, leaving the per-SQ sqb_ptrs arrays behind.
Use otx2_free_sq_res() for the SQ unwind path and let it free sqb_ptrs
even when sq->sqe has not been allocated yet.
The bug was first flagged by an experimental analysis tool we are
developing for kernel memory-management bugs while analyzing
v6.13-rc1. The tool is still under development and is not yet publicly
available. Manual inspection confirms that the bug is still
present in v7.1.1.
An x86_64 allyesconfig build showed no new warnings. As we do not have an
OcteonTX2 PF device and the corresponding AF mailbox setup to test with,
no runtime testing was able to be performed.
Added
Reference
https://git.kernel.org/stable/c/148d7ec0a3a98839c320e6cdd112e2e88bfb091b
Added
Reference
https://git.kernel.org/stable/c/23d917acd9c9a9fd999688ec3fdde7aa58ab8a14
Added
Reference
https://git.kernel.org/stable/c/5df30f05db96552903680a17f858d250dfd9e86e
Added
Reference
https://git.kernel.org/stable/c/5e023fe2569e630ba23b5558ebe4bf4837af4d16
Added
Reference
https://git.kernel.org/stable/c/62e7df6d042aeebd5efb581074e28865c04477be
Added
Affected
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"148d7ec0a3a98839c320e6cdd112e2e88bfb091b","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5e023fe2569e630ba23b5558ebe4bf4837af4d16","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"5df30f05db96552903680a17f858d250dfd9e86e","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"23d917acd9c9a9fd999688ec3fdde7aa58ab8a14","versionType":"git","status":"affected"},{"version":"caa2da34fd25a37e9fd43343b6966fb9d730a6d5","lessThan":"62e7df6d042aeebd5efb581074e28865c04477be","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"5.6","status":"affected"},{"version":"0","lessThan":"5.6","versionType":"semver","status":"unaffected"},{"version":"6.6.148","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.101","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.40","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc3","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]
Quick Info
CVE Dictionary Entry: CVE-2026-72023 NVD
Published Date: 08/15/2026 NVD
Last Modified: 08/23/2026
Source: kernel.org
) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
