CVE-2026-72032
kernel: net/mlx5: HWS, fix matcher leak on resize target setup failure
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's net/mlx5 HWS (Hardware Steering) component. This vulnerability occurs when the hws_bwc_matcher_move() function attempts to resize a matcher, and the mlx5hws_matcher_resize_set_target() operation fails. In such a scenario, a replacement matcher is allocated but not properly deallocated, leading to a memory leak. Over time, repeated occurrences of this flaw could potentially lead to a Denial of Service (DoS) due to resource exhaustion.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime