CVE-2026-72056: net: ena: clean up XDP TX queues when regular TX setup fails
In the Linux kernel, the following vulnerability has been resolved:
net: ena: clean up XDP TX queues when regular TX setup fails
createqueueswithsizebackoff() creates XDP TX queues before setting up the regular TX path. If the subsequent allocation or creation of regular TX queues fails, the error handling paths omit the teardown of the XDP TX queues, leading to a resource leak.
Fix this by explicitly destroying the XDP TX queue subset at the two missing failure points.
The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc7.
An x8664 allyesconfig build showed no new warnings. As we do not have an ENA device to test with, no runtime testing was able to be performed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel net: enato a version that resolves this vulnerability.Fixed in v6.13-rc1 - Upgrade
Upgrade
Linux kernel net: enato a version that resolves this vulnerability.Fixed in v7.1-rc7
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72056?
CVE-2026-72056 has a risk rating of 12, indicating a critical vulnerability.
How do I fix CVE-2026-72056?
To address CVE-2026-72056, update your Linux kernel to the latest version that includes the security fix.
What systems are affected by CVE-2026-72056?
CVE-2026-72056 affects systems running vulnerable versions of the Linux kernel.
What kind of vulnerability is CVE-2026-72056?
CVE-2026-72056 is related to improper cleanup of XDP TX queues in the Linux kernel.
When was CVE-2026-72056 published?
CVE-2026-72056 was published on August 15, 2026.