CVE-2026-72448

octeontx2-pf: Fix leak of SQ timestamp buffer on teardown

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: Fix leak of SQ timestamp buffer on teardown

The send-queue timestamp ring is allocated with qmem_alloc() when timestamping is used, but otx2_free_sq_res() never freed sq->timestamps, leaking that memory across ifdown and device removal. Add the missing qmem_free() alongside the other SQ companion buffers.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c9c12d339d93366732112d7ff472958834bfc3c5 to before c642a530aaaeb9a3e356cedfe77955e7f983380eAffected c9c12d339d93366732112d7ff472958834bfc3c5 to before e68ada66afcae0bc2a7c06b43c5a9a081d29e7b4Affected c9c12d339d93366732112d7ff472958834bfc3c5 to before d6c0b0c802d3c49b86cad665a7f3790dc55a0394Affected c9c12d339d93366732112d7ff472958834bfc3c5 to before 19d2d36e193c3fb515c052a56bfc83d8ac7b6764Affected c9c12d339d93366732112d7ff472958834bfc3c5 to before e8e9dff204e8d8553495893e1a44d2b5021648deAffected c9c12d339d93366732112d7ff472958834bfc3c5 to before 3d45d40b872aec0073d4cf08956a6c9b87c5e396Affected c9c12d339d93366732112d7ff472958834bfc3c5 to before 452ec5058ea4ed63adae8d6beeac9ee687fe8061Affected c9c12d339d93366732112d7ff472958834bfc3c5 to before a056db30de92945ff8ee6033096678bfbae878e3Affected
LinuxLinux	5.10Affected before 5.10Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

c9c12d339d93366732112d7ff472958834bfc3c5 to before c642a530aaaeb9a3e356cedfe77955e7f983380eAffected
c9c12d339d93366732112d7ff472958834bfc3c5 to before e68ada66afcae0bc2a7c06b43c5a9a081d29e7b4Affected
c9c12d339d93366732112d7ff472958834bfc3c5 to before d6c0b0c802d3c49b86cad665a7f3790dc55a0394Affected
c9c12d339d93366732112d7ff472958834bfc3c5 to before 19d2d36e193c3fb515c052a56bfc83d8ac7b6764Affected
c9c12d339d93366732112d7ff472958834bfc3c5 to before e8e9dff204e8d8553495893e1a44d2b5021648deAffected
c9c12d339d93366732112d7ff472958834bfc3c5 to before 3d45d40b872aec0073d4cf08956a6c9b87c5e396Affected
c9c12d339d93366732112d7ff472958834bfc3c5 to before 452ec5058ea4ed63adae8d6beeac9ee687fe8061Affected
c9c12d339d93366732112d7ff472958834bfc3c5 to before a056db30de92945ff8ee6033096678bfbae878e3Affected

LinuxLinux

5.10Affected
before 5.10Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.