CVE-2026-72307

A flaw was found in the Linux kernel's mlxsw driver. When the mlxsw_sp_vrs_lpm_tree_replace() function encounters an error during Virtual Router (VR) replacement operations, its rollback mechanism fails to correctly release resources. This leads to a reference count leak, where system resources are not properly deallocated. Over time, this resource exhaustion could potentially result in a denial of service (DoS) condition, making the system unresponsive.

This vulnerability is rated as having Low severity for Red Hat Enterprise Linux because exploitation requires specific Mellanox Spectrum hardware switches and access under uncommon error failure scenarios during routing table replacements. Systems without supported Mellanox SwitchX or Spectrum hardware network devices do not load this driver and are not exposed. Furthermore, triggering the condition requires local administrative privileges capable of configuring virtual routing topology, and the resultant reference leak causes minor memory overhead rather than an immediate system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.