CVE-2026-72065

CVSS 9.8 (critical) · published 2026-08-15

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.

Weakness: CWE-20

Source: NVD CVE-2026-72065

References

• https://git.kernel.org/stable/c/282c5214ca4eb3799158c76782646e86d2945d1b
• https://git.kernel.org/stable/c/2e276b14b6d378372bf0152df89286cbe7632fb0
• https://git.kernel.org/stable/c/2e2a83b4998af4384e677d3b2ac08565274279bf
• https://git.kernel.org/stable/c/6080189291d958604dcefe513a13900835ac982f
• https://git.kernel.org/stable/c/6d13eaa13341a8f80aaf86f78591e1b1d393711d
• https://git.kernel.org/stable/c/a631f82f89c76084ad5b2b9c043d3b391ffa56d8
• https://git.kernel.org/stable/c/d2568e64d01f480200063fadd67d6938f676c66f

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.