SB20260816519 - Memory leak in Linux kernel core lib driver

Description

This security bulletin contains information about 1 vulnerability.

1) Memory leak (CVE-ID: CVE-2026-72006)

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a memory leak in mlx5_st_dealloc_index() when repeatedly allocating and releasing mkeys carrying TPH steering-tag hints. A local user can trigger repeated allocation and release cycles to cause a denial of service.

The issue occurs when the last reference to an ST table entry is dropped and the associated bookkeeping structure remains unfreed, causing slab memory usage to grow over time.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/262da8b6ea03d01ee7ed01ad309e4c89941f6b14
• https://git.kernel.org/stable/c/6eb4cf2fa8997f62c11e0006dc010a1fd89c5a75
• https://git.kernel.org/stable/c/df6134b527a88b3e65ba6ae5073664af091d5fd2