Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

CVE-2026-72023

Published Aug 15, 2026 EPSS 0.21% (11th pctl)

Overview

CVE-2026-72023 is a known-severity vulnerability. It was published on August 15, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: fix SQB pointer leak on init failure

otx2_init_hw_resources() initializes SQ aura and pool resources before

several later setup steps. On failure, err_free_sq_ptrs only frees SQB

pages, leaving the per-SQ sqb_ptrs arrays behind.

Use otx2_free_sq_res() for the SQ unwind path and let it free sqb_ptrs

even when sq->sqe has not been allocated yet.

The bug was first flagged by an experimental analysis tool we are

developing for kernel memory-management bugs while analyzing

v6.13-rc1. The tool is still under development and is not yet publicly

available. Manual inspection confirms that the bug is still

present in v7.1.1.

An x86_64 allyesconfig build showed no new warnings. As we do not have an

OcteonTX2 PF device and the corresponding AF mailbox setup to test with,

no runtime testing was able to be performed.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/148d7ec0a3a98839c320e6cdd112e2e88bfb091b Ref git.kernel.org/stable/c/23d917acd9c9a9fd999688ec3fdde7aa58ab8a14 Ref git.kernel.org/stable/c/2cac2eac935ed7e0a9203204e036a1f6090ebc3d Ref git.kernel.org/stable/c/42c2836f10ac0427dac9e9a923d6ee2189dec544 Ref git.kernel.org/stable/c/5df30f05db96552903680a17f858d250dfd9e86e Ref git.kernel.org/stable/c/5e023fe2569e630ba23b5558ebe4bf4837af4d16 Ref git.kernel.org/stable/c/62e7df6d042aeebd5efb581074e28865c04477be Ref git.kernel.org/stable/c/fca9c22633169a6c5d429a32e439121b6419e2be

Frequently Asked Questions

What is CVE-2026-72023?

CVE-2026-72023 is a known-severity vulnerability. It was published on August 15, 2026.

How severe is CVE-2026-72023?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2026-72023?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2026-72023?

CyberStrike's AI-powered security agents can automatically detect CVE-2026-72023 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.
Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.
Code Review

AI-driven PR review catches vulnerable dependencies before they ship.
HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.
Browse by year 2026 2025 2024 2023 2022 2021 2020 2019 2018 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000 1999