CVE-2026-72032: net/mlx5: HWS, fix matcher leak on resize target setup failure
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: HWS, fix matcher leak on resize target setup failure
hwsbwcmatchermove() allocates a replacement matcher before setting it as the resize target. If mlx5hwsmatcherresizesettarget() fails, the replacement matcher is not attached anywhere and is leaked.
Fix the leak by destroying the replacement matcher before returning from the resize-target failure path.
The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1.1.
An x8664 allyesconfig build showed no new warnings. As we do not have a mlx5 HWS-capable device to test with, no runtime testing was able to be performed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (net/mlx5: HWS)to a version that resolves this vulnerability.Fixed in v6.13-rc1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72032?
CVE-2026-72032 has a severity score of 15.
How do I fix CVE-2026-72032?
To fix CVE-2026-72032, ensure you update to the latest version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2026-72032?
CVE-2026-72032 affects the Linux kernel, specifically within the net/mlx5 module.
When was CVE-2026-72032 published?
CVE-2026-72032 was published on August 15, 2026.
What is the nature of the vulnerability in CVE-2026-72032?
CVE-2026-72032 is a matcher leak issue during resize target setup failure in the Linux kernel.