---
id: CVE-2026-72056
title: 'net: ena: clean up XDP TX queues when regular TX setup fails'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: ena: clean up XDP TX queues when regular TX setup fails

  create_queues_with_size_backoff() creates XDP TX queues before setting
  up the regular TX path. If the subs…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 <
    df65d9fea8437235e740552e542fb309765507db
  - >-
    Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 <
    5daa63404b708fc74e94da8398affbb148d09044
  - >-
    Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 <
    523caef03124ecc08ce62a78c617759c2d28cf1c
  - >-
    Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 <
    f2ff634d95f8a6c885b9ce71a64067e255bcc34a
  - >-
    Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 <
    6773d6d82bdabddab2b31605d6d7029c91dbd217
  - >-
    Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 <
    6596baf8041100a9d1647beb5ea8ea4496ce058f
  - >-
    Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 <
    11f68ebc6891d11de5f32b7dee918c5dc18b8de1
  - >-
    Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 <
    1bd6676254b4ab6acd44b662b5e92822c036463a
  - Linux 5.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:50:49.555392Z'
published: '2026-08-15'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:55:18.958Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72056'
references:
  - url: 'https://git.kernel.org/stable/c/df65d9fea8437235e740552e542fb309765507db'
  - url: 'https://git.kernel.org/stable/c/5daa63404b708fc74e94da8398affbb148d09044'
  - url: 'https://git.kernel.org/stable/c/523caef03124ecc08ce62a78c617759c2d28cf1c'
  - url: 'https://git.kernel.org/stable/c/f2ff634d95f8a6c885b9ce71a64067e255bcc34a'
  - url: 'https://git.kernel.org/stable/c/6773d6d82bdabddab2b31605d6d7029c91dbd217'
  - url: 'https://git.kernel.org/stable/c/6596baf8041100a9d1647beb5ea8ea4496ce058f'
  - url: 'https://git.kernel.org/stable/c/11f68ebc6891d11de5f32b7dee918c5dc18b8de1'
  - url: 'https://git.kernel.org/stable/c/1bd6676254b4ab6acd44b662b5e92822c036463a'
tags:
  - cve.org
epss: 0.0022
epssPercentile: 0.1255
ingestedAt: '2026-11-06T18:00:12.598Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: ena: clean up XDP TX queues when regular TX setup fails

create_queues_with_size_backoff() creates XDP TX queues before setting
up the regular TX path. If the subsequent allocation or creation of
regular TX queues fails, the error handling paths omit the teardown of the
XDP TX queues, leading to a resource leak.

Fix this by explicitly destroying the XDP TX queue subset at the two
missing failure points.

The bug was first flagged by an experimental analysis tool we are
developing for kernel memory-management bugs while analyzing
v6.13-rc1. The tool is still under development and is not yet publicly
available. Manual inspection confirms that the bug is still
present in v7.1-rc7.

An x86_64 allyesconfig build showed no new warnings. As we do not have
an ENA device to test with, no runtime testing was able to be performed.

## Affected

- `Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 < df65d9fea8437235e740552e542fb309765507db`
- `Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 < 5daa63404b708fc74e94da8398affbb148d09044`
- `Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 < 523caef03124ecc08ce62a78c617759c2d28cf1c`
- `Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 < f2ff634d95f8a6c885b9ce71a64067e255bcc34a`
- `Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 < 6773d6d82bdabddab2b31605d6d7029c91dbd217`
- `Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 < 6596baf8041100a9d1647beb5ea8ea4496ce058f`
- `Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 < 11f68ebc6891d11de5f32b7dee918c5dc18b8de1`
- `Linux >= 548c4940b9f1f527f81509468dd60b61418880b6 < 1bd6676254b4ab6acd44b662b5e92822c036463a`
- `Linux 5.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.