CVE-2026-23072

linux: In the Linux kernel, the following vulnerability has been resolved: l2tp: Fix memleak in l2tp_udp_encap_recv()

CVE-2026-23072 is fixed in 49 products on 1 platform, first by DEBIAN-CVE-2026-23072, released February 4, 2026. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0015
3rd percentile

In the Linux kernel, the following vulnerability has been resolved: l2tp: Fix memleak in l2tp_udp_encap_recv(). syzbot reported memleak of struct l2tp_session, l2tp_tunnel, sock, etc. [0] The cited commit moved down the validation of the protocol version in l2tp_udp_encap_recv(). The new place requires an extra error handling to avoid the memleak. Let's call l2tp_session_put() there. [0]: BUG: memory leak unreferenced object 0xffff88810a290200 (size 512): comm "syz.0.17", pid 6086, jiffies 4294944299 hex dump (first 32 bytes): 7d eb 04 0c 00 00 00 00 01 00 00 00 00 00 00 00 }............... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc babb6a4f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] l2tp_session_create+0x3a/0x3b0 net/l2tp/l2tp_core.c:1778 pppol2tp_connect+0x48b/0x920 net/l2tp/l2tp_ppp.c:755 __sys_connect_file+0x7a/0xb0 net/socket.c:2089 __sys_connect+0xde/0x110 net/socket.c:2108 __do_sys_connect net/socket.c:2114 [inline] __se_sys_connect net/socket.c:2111 [inline] __x64_sys_connect+0x1c/0x30 net/socket.c:2111 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Where it's fixed

ProductFixed inFixReleased
Linux
dtb-aarch64 · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-64kb · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-azure · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-default · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-default-base · opensuse-leap 16.0 6.12.0-160000.27.1.160000.2.8 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-docs · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-kvmsmall · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-obs-build · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-obs-qa · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-rt · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-source · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-syms · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
kernel-uek · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-devel · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-devel · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-deprecated · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-deprecated · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-desktop · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-desktop · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-extra · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-extra · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-extra-netfilter · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-extra-netfilter · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-usb · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-usb · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-wireless · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-debug-modules-wireless · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-devel · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-devel · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-doc · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-doc · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-deprecated · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-deprecated · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-desktop · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-desktop · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-extra · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-extra · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-extra-netfilter · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-extra-netfilter · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-usb · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-usb · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-wireless · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-modules-wireless · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-tools · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek-tools · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-devel · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-devel · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-core · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-core · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-deprecated · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-deprecated · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-desktop · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-desktop · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-extra · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-extra · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-extra-netfilter · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-extra-netfilter · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-usb · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-usb · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-wireless · ol 10 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-uek64k-modules-wireless · ol 9 0:6.12.0-201.74.2.1.el9uek ELSA-2026-50232 Apr 15, 2026
kernel-zfcpdump · opensuse-leap 16.0 6.12.0-160000.28.1 OPENSUSE-SU-2026:20572-1 Apr 20, 2026
linux · Debian 13.5 (trixie) 6.12.69-1 DEBIAN-CVE-2026-23072 Feb 4, 2026
linux · Debian 14 6.18.8-1 DEBIAN-CVE-2026-23072 Feb 4, 2026

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.