Critical severity9.8NVD Advisory· Published Aug 15, 2026· Updated Aug 23, 2026
CVE-2026-72065
CVE-2026-72065
Description
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Validate the packet length reported by the NIC
Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.
Affected products
2Patches
Vulnerability mechanics
References
7- git.kernel.org/stable/c/282c5214ca4eb3799158c76782646e86d2945d1bnvd
- git.kernel.org/stable/c/2e276b14b6d378372bf0152df89286cbe7632fb0nvd
- git.kernel.org/stable/c/2e2a83b4998af4384e677d3b2ac08565274279bfnvd
- git.kernel.org/stable/c/6080189291d958604dcefe513a13900835ac982fnvd
- git.kernel.org/stable/c/6d13eaa13341a8f80aaf86f78591e1b1d393711dnvd
- git.kernel.org/stable/c/a631f82f89c76084ad5b2b9c043d3b391ffa56d8nvd
- git.kernel.org/stable/c/d2568e64d01f480200063fadd67d6938f676c66fnvd
News mentions
0No linked articles in our index yet.