CVE-2026-72343 | Linux Kernel up to 7.2-rc2 mlx5e net/mlx5e mlx5e_hv_vhca_stats_create stats_nch/max_nch double free

A vulnerability has been found in Linux Kernel up to 7.2-rc2 and classified as very critical. Affected is the function mlx5e_hv_vhca_stats_create of the file net/mlx5e of the component mlx5e. Performing a manipulation of the argument stats_nch/max_nch results in double free.

This vulnerability is cataloged as CVE-2026-72343. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More