# CVE-2026-23072: linux: In the Linux kernel, the following vulnerability has been resolved: l2tp: Fix memleak in l2tp_udp_encap_recv() CVE-2026-23072 is fixed in 49 products on 1 platform, first by DEBIAN-CVE-2026-23072, released February 4, 2026. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2026-23072 - Priority: Routine - CVSS: 5.5 (medium) - EPSS: 0.0015 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Feb 4, 2026 ## Description In the Linux kernel, the following vulnerability has been resolved: l2tp: Fix memleak in l2tp_udp_encap_recv(). syzbot reported memleak of struct l2tp_session, l2tp_tunnel, sock, etc. [0] The cited commit moved down the validation of the protocol version in l2tp_udp_encap_recv(). The new place requires an extra error handling to avoid the memleak. Let's call l2tp_session_put() there. [0]: BUG: memory leak unreferenced object 0xffff88810a290200 (size 512): comm "syz.0.17", pid 6086, jiffies 4294944299 hex dump (first 32 bytes): 7d eb 04 0c 00 00 00 00 01 00 00 00 00 00 00 00 }............... 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc babb6a4f): kmemleak_alloc_recursive include/linux/kmemleak.h:44 [inline] slab_post_alloc_hook mm/slub.c:4958 [inline] slab_alloc_node mm/slub.c:5263 [inline] __do_kmalloc_node mm/slub.c:5656 [inline] __kmalloc_noprof+0x3e0/0x660 mm/slub.c:5669 kmalloc_noprof include/linux/slab.h:961 [inline] kzalloc_noprof include/linux/slab.h:1094 [inline] l2tp_session_create+0x3a/0x3b0 net/l2tp/l2tp_core.c:1778 pppol2tp_connect+0x48b/0x920 net/l2tp/l2tp_ppp.c:755 __sys_connect_file+0x7a/0xb0 net/socket.c:2089 __sys_connect+0xde/0x110 net/socket.c:2108 __do_sys_connect net/socket.c:2114 [inline] __se_sys_connect net/socket.c:2111 [inline] __x64_sys_connect+0x1c/0x30 net/socket.c:2111 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xa4/0xf80 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | dtb-aarch64 opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-64kb opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-azure opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-default opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-default-base opensuse-leap 16.0 | 6.12.0-160000.27.1.160000.2.8 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-docs opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-kvmsmall opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-obs-build opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-obs-qa opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-rt opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-source opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-syms opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | kernel-uek ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-devel ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-devel ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-deprecated ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-deprecated ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-desktop ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-desktop ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-extra ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-extra ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-extra-netfilter ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-extra-netfilter ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-usb ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-usb ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-wireless ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-debug-modules-wireless ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-devel ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-devel ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-doc ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-doc ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-deprecated ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-deprecated ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-desktop ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-desktop ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-extra ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-extra ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-extra-netfilter ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-extra-netfilter ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-usb ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-usb ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-wireless ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-modules-wireless ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-tools ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek-tools ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-devel ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-devel ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-core ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-core ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-deprecated ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-deprecated ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-desktop ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-desktop ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-extra ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-extra ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-extra-netfilter ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-extra-netfilter ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-usb ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-usb ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-wireless ol 10 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-uek64k-modules-wireless ol 9 | 0:6.12.0-201.74.2.1.el9uek | [ELSA-2026-50232](https://patchblox.com/security/data/fix/linux/elsa-2026-50232.md) | Apr 15, 2026 | | Linux | kernel-zfcpdump opensuse-leap 16.0 | 6.12.0-160000.28.1 | [OPENSUSE-SU-2026:20572-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20572-1.md) | Apr 20, 2026 | | Linux | linux Debian 13.5 (trixie) | 6.12.69-1 | [DEBIAN-CVE-2026-23072](https://patchblox.com/security/data/fix/linux/debian-cve-2026-23072.md) | Feb 4, 2026 | | Linux | linux Debian 14 | 6.18.8-1 | [DEBIAN-CVE-2026-23072](https://patchblox.com/security/data/fix/linux/debian-cve-2026-23072.md) | Feb 4, 2026 | --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.