9.8

CVE-2026-72065

net: mana: Validate the packet length reported by the NIC

In the Linux kernel, the following vulnerability has been resolved:

net: mana: Validate the packet length reported by the NIC

Validate the packet length reported in the RX CQE before passing it
to skb processing. The CQE is supplied by the NIC device and should
not be blindly trusted.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f
Version < a631f82f89c76084ad5b2b9c043d3b391ffa56d8
Status affected
Version ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f
Version < d2568e64d01f480200063fadd67d6938f676c66f
Status affected
Version ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f
Version < 2e276b14b6d378372bf0152df89286cbe7632fb0
Status affected
Version ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f
Version < 6080189291d958604dcefe513a13900835ac982f
Status affected
Version ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f
Version < 6d13eaa13341a8f80aaf86f78591e1b1d393711d
Status affected
Version ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f
Version < 282c5214ca4eb3799158c76782646e86d2945d1b
Status affected
Version ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f
Version < 2e2a83b4998af4384e677d3b2ac08565274279bf
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 5.13
Status affected
Version 0
Version < 5.13
Status unaffected
Version <= 5.15.*
Version 5.15.217
Status unaffected
Version <= 6.1.*
Version 6.1.184
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.66% 0.487
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/2e276b14b6d378372bf0152df89286cbe7632fb0
https://git.kernel.org/stable/c/6080189291d958604dcefe513a13900835ac982f
https://git.kernel.org/stable/c/6d13eaa13341a8f80aaf86f78591e1b1d393711d
https://git.kernel.org/stable/c/282c5214ca4eb3799158c76782646e86d2945d1b
https://git.kernel.org/stable/c/2e2a83b4998af4384e677d3b2ac08565274279bf
https://git.kernel.org/stable/c/a631f82f89c76084ad5b2b9c043d3b391ffa56d8
https://git.kernel.org/stable/c/d2568e64d01f480200063fadd67d6938f676c66f