SB20260815278 - Improper resource shutdown or release in Linux kernel octeontx2 nic driver
Published: August 15, 2026
Security Bulletin ID
SB20260815278
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Partial DoS
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Improper resource shutdown or release (CVE-ID: CVE-2026-72448)
CWE-ID: CWE-404 - Improper Resource Shutdown or Release
CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper resource shutdown or release in the otx2_free_sq_res() send-queue resource teardown logic when tearing down a send queue with timestamping enabled. A local user can trigger interface shutdown or device removal to cause a denial of service.
Only send queues using timestamping are affected.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/19d2d36e193c3fb515c052a56bfc83d8ac7b6764
- https://git.kernel.org/stable/c/3d45d40b872aec0073d4cf08956a6c9b87c5e396
- https://git.kernel.org/stable/c/452ec5058ea4ed63adae8d6beeac9ee687fe8061
- https://git.kernel.org/stable/c/a056db30de92945ff8ee6033096678bfbae878e3
- https://git.kernel.org/stable/c/c642a530aaaeb9a3e356cedfe77955e7f983380e
- https://git.kernel.org/stable/c/d6c0b0c802d3c49b86cad665a7f3790dc55a0394
- https://git.kernel.org/stable/c/e68ada66afcae0bc2a7c06b43c5a9a081d29e7b4
- https://git.kernel.org/stable/c/e8e9dff204e8d8553495893e1a44d2b5021648de