CVE-2026-72072

The CVE-2026-72072 issue affects the Linux kernel’s mlx5e MACsec offload path. A use-after-free could occur when an offloaded MACsec RX SC is deleted: metadata_dst was freed unconditionally via metadata_dst_free(), ignoring the reference count, while readers could attach a freed dst to an skb dur...

CVE-2026-72072 net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadatadst on RX SC delete When an offloaded MACsec RX SC is deleted, macsecdelrxscctx freed the per-SC metadatadst with metadatadstfree, which kfrees the object unconditionally and ignor...