CVE-2026-72023 Linux CVE debrief

Who should care

Users of Linux systems with OcteonTX2 PF drivers, system administrators, and security teams responsible for patching vulnerabilities should be aware of this vulnerability. They should prioritize patching and review system configurations to ensure the OcteonTX2 PF driver is not exposed to untrusted networks. Additionally, they should monitor system logs for potential exploitation attempts. This vulnerability could lead to a denial of service or privilege escalation if exploited, making it a high-priority patch for affected systems.

Technical summary

The Linux kernel's OcteonTX2 PF driver has a vulnerability in the otx2_init_hw_resources function. On failure, the function err_free_sq_ptrs only frees SQB pages, leaving the per-SQ sqb_ptrs arrays behind, potentially leading to a memory leak. This vulnerability affects the Linux kernel, specifically the OcteonTX2 PF driver, and could potentially lead to a denial of service or privilege escalation if exploited. The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1.

Defensive priority

This vulnerability affects the Linux kernel, specifically the OcteonTX2 PF driver, and could potentially lead to a denial of service or privilege escalation if exploited. Users of affected systems should prioritize patching.

Recommended defensive actions

• Apply the patch from the Linux kernel repository
• Review system configurations and ensure OcteonTX2 PF driver is not exposed to untrusted networks
• Monitor system logs for potential exploitation attempts
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The vulnerability was discovered in the Linux kernel's OcteonTX2 PF driver, specifically in the otx2_init_hw_resources function. On failure, the function err_free_sq_ptrs only frees SQB pages, leaving the per-SQ sqb_ptrs arrays behind. This could lead to a memory leak. The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1.1. An x86_64 allyesconfig build showed no new warnings. As we do not have an OcteonTX2 PF device and the corresponding AF mailbox setup to test with, no runtime testing was able to be performed. Additional analysis and verification are required to fully understand the impact of this vulnerability.

Official resources