{
  "cveId": "CVE-2026-72344",
  "url": "https://patchblox.com/security/cve/CVE-2026-72344",
  "summary": "CVE-2026-72344 is fixed in linux on 1 platform by DEBIAN-CVE-2026-72344 (version 7.1.5-1), released August 15, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: TC, skip peer flow cleanup when LAG s...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable  mlx5_lag_get_dev_seq() will return error when the peer isn\u0027t in the LAG or when no device is marked as master. Result bad memory access and kernel crash[1].  Hence, skip the peer when lookup fails.  Note: In case there are peer flows, they are cleaned before LAG cleared the master mark.  [1] RIP: 0010:mlx5e_tc_del_fdb_peers_flow\u002B0x3d/0x350 [mlx5_core] Call Trace:  \u003CTASK\u003E  mlx5e_tc_clean_fdb_peer_flows\u002B0xc1/0x130 [mlx5_core]  mlx5_esw_offloads_unpair\u002B0x3a/0x400 [mlx5_core]  mlx5_esw_offloads_devcom_event\u002B0xee/0x360 [mlx5_core]  mlx5_devcom_send_event\u002B0x7a/0x140 [mlx5_core]  mlx5_esw_offloads_devcom_cleanup\u002B0x2f/0x90 [mlx5_core]  mlx5e_tc_esw_cleanup\u002B0x28/0xf0 [mlx5_core]  mlx5e_rep_tc_cleanup\u002B0x19/0x30 [mlx5_core]  mlx5e_cleanup_uplink_rep_tx\u002B0x36/0x40 [mlx5_core]  mlx5e_cleanup_rep_tx\u002B0x55/0x60 [mlx5_core]  mlx5e_detach_netdev\u002B0x96/0xf0 [mlx5_core]  mlx5e_netdev_change_profile\u002B0x5b/0x120 [mlx5_core]  mlx5e_netdev_attach_nic_profile\u002B0x1b/0x30 [mlx5_core]  mlx5e_vport_rep_unload\u002B0xdd/0x110 [mlx5_core]  __esw_offloads_unload_rep\u002B0x81/0xb0 [mlx5_core]  mlx5_eswitch_unregister_vport_reps\u002B0x1d7/0x220 [mlx5_core]  mlx5e_rep_remove\u002B0x22/0x30 [mlx5_core]  device_release_driver_internal\u002B0x194/0x1f0  bus_remove_device\u002B0xe8/0x1b0  device_del\u002B0x159/0x3c0  mlx5_rescan_drivers_locked\u002B0xbc/0x2d0 [mlx5_core]  mlx5_unregister_device\u002B0x54/0x80 [mlx5_core]  mlx5_uninit_one\u002B0x73/0x130 [mlx5_core]  remove_one\u002B0x78/0xe0 [mlx5_core]  pci_device_remove\u002B0x39/0xa0",
  "published": "2026-08-15T06:22:07Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00165,
  "epssPercentile": 0.05759,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.5-1",
      "fix": "DEBIAN-CVE-2026-72344",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-72344",
      "released": "2026-08-15T22:38:55Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}