CVE-2026-72006
- Source
- https://cve.org/CVERecord?id=CVE-2026-72006
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72006.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-72006
- Downstream
- Published
- 2026-08-15T05:51:36.635Z
- Modified
- 2026-08-18T03:31:00.303313638Z
- Summary
- net/mlx5: free mlx5_st_idx_data on final dealloc
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: free mlx5stidx_data on final dealloc
Workloads that repeatedly allocate and release mkeys carrying TPH steering-tag hints (e.g. churning RDMA MRs) leak one struct mlx5stidx_data per cycle; kmemleak flags it as unreferenced and the kmalloc slab grows over time.
When the last reference to an ST table entry is dropped, mlx5stdeallocindex() removed the entry from idxxa but the backing mlx5stidx_data allocation was never freed.
Free idxdata after the xaerase() so the lifetime of the bookkeeping struct matches the lifetime of the ST entry it tracks.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72006.json" }- References
-
- https://git.kernel.org/stable/c/262da8b6ea03d01ee7ed01ad309e4c89941f6b14
- https://git.kernel.org/stable/c/6eb4cf2fa8997f62c11e0006dc010a1fd89c5a75
- https://git.kernel.org/stable/c/df6134b527a88b3e65ba6ae5073664af091d5fd2
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72006.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-72006
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git