CVE-2026-72308

A flaw was found in the mlxsw driver of the Linux kernel. This vulnerability occurs when the mlxsw_sp_port_lag_join() function fails to properly release a network resource reference, leading to a reference count leak. Over time, this leak could exhaust system resources, potentially resulting in a denial of service (DoS) for affected systems.

This vulnerability is rated as Low severity because it requires local administrative privileges to configure link aggregation groups on specialized Mellanox Spectrum hardware switches. Exploitation is constrained to an uncommon error path during port LAG joins, resulting in an incremental reference count leak rather than an immediate system crash. Standard Red Hat Enterprise Linux deployments lacking this specific switch ASIC hardware are unaffected by this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.