CVE-2026-72448

Summary

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: Fix leak of SQ timestamp buffer on teardown

The send-queue timestamp ring is allocated with qmem_alloc() when timestamping is used, but otx2_free_sq_res() never freed sq->timestamps, leaking that memory across ifdown and device removal. Add the missing qmem_free() alongside the other SQ companion buffers.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxc9c12d339d93366732112d7ff472958834bfc3c5 < c642a530aaaeb9a3e356cedfe77955e7f983380eaffected
LinuxLinuxc9c12d339d93366732112d7ff472958834bfc3c5 < e68ada66afcae0bc2a7c06b43c5a9a081d29e7b4affected
LinuxLinuxc9c12d339d93366732112d7ff472958834bfc3c5 < d6c0b0c802d3c49b86cad665a7f3790dc55a0394affected
LinuxLinuxc9c12d339d93366732112d7ff472958834bfc3c5 < 19d2d36e193c3fb515c052a56bfc83d8ac7b6764affected
LinuxLinuxc9c12d339d93366732112d7ff472958834bfc3c5 < e8e9dff204e8d8553495893e1a44d2b5021648deaffected
LinuxLinuxc9c12d339d93366732112d7ff472958834bfc3c5 < 3d45d40b872aec0073d4cf08956a6c9b87c5e396affected
LinuxLinuxc9c12d339d93366732112d7ff472958834bfc3c5 < 452ec5058ea4ed63adae8d6beeac9ee687fe8061affected
LinuxLinuxc9c12d339d93366732112d7ff472958834bfc3c5 < a056db30de92945ff8ee6033096678bfbae878e3affected
LinuxLinux5.10affected
LinuxLinux0 < 5.10unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References