CVE-2026-72308

CVE-2026-72308

published August 15, 2026

CVSS
—
EPSS
0%
Percentile
11.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()

When mlxsw_sp_port_lag_index_get() fails, mlxsw_sp_port_lag_join()

returns an error without releasing the lag reference obtained by

the earlier mlxsw_sp_lag_get(). All other error paths in the

function jump to the cleanup label that ends with

mlxsw_sp_lag_put(), so this is a single missed release.

Fix the leak by replacing the bare 'return err' with a goto to the

existing error cleanup label, which will drop the reference safely.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.9th percentile
Published
2026-08-15T10:22Z
References (8)
EPSS history
Timeline
  • 15 AUG 05:55Z
    mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
    cvelistv5