SB20260816466 - Improper resource shutdown or release in Linux kernel amazon ena driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260816466

SB20260816466 - Improper resource shutdown or release in Linux kernel amazon ena driver

Published: August 16, 2026

Security Bulletin ID SB20260816466
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper resource shutdown or release (CVE-ID: CVE-2026-72056)

CWE-ID: CWE-404 - Improper Resource Shutdown or Release

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper resource shutdown in ena XDP TX queue handling in the ena network driver when setting up regular TX queues after XDP TX queues have already been created. A local user can trigger regular TX setup failures to cause a denial of service.

The issue occurs in error-handling paths that omit teardown of previously created XDP TX queues.


Remediation

Install update from vendor's website.

References