7.8

CVE-2026-72450

xfrm: validate selector family and prefixlen during match

In the Linux kernel, the following vulnerability has been resolved:

xfrm: validate selector family and prefixlen during match

syzbot reported a shift-out-of-bounds in xfrm_selector_match()
due to AF_UNSPEC selector with large prefixlen (e.g. 128) matched
against IPv4 flow (when XFRM_STATE_AF_UNSPEC is set).

Fix this by:

- Rejecting mismatched families in xfrm_selector_match.
- Returning false in addr4_match if prefixlen > 32.
- Returning false in addr_match if prefixlen > 128 (prevents overflow).
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 8df5cd51fd70c33aa1776e5cbcd82b0a86649d73
Version < 87a5bbccc7ff4edb3f42fea387124237d2ba91ee
Status affected
Version 2d08a6c31c65f23db71a5385ee9cf9d8f9a67a71
Version < bd7f202cf77556cff59f68dc30e4cdf40cb6e33b
Status affected
Version bce1afaa212ec380bf971614f70909a27882b862
Version < a3968ad4195d72c8fddcc6c0ef39da95ac98711a
Status affected
Version 7d9868180bd1e4cf37e7c5067362658971162366
Version < efa9e3b9f3dea2e1ea4c7edf4edc863faef85986
Status affected
Version 3f0ab59e6537c6a8f9e1b355b48f9c05a76e8563
Version < 78783fefdc8f36879b1a17efa0d3195ea5f2dc5f
Status affected
Version 3f0ab59e6537c6a8f9e1b355b48f9c05a76e8563
Version < 6d99379c58f7f1c6ab2cc7aba01a4f52d71adcfe
Status affected
Version 3f0ab59e6537c6a8f9e1b355b48f9c05a76e8563
Version < 5a03a2ee17e8259dde631ed84fd8322db06cb2ae
Status affected
Version 3f0ab59e6537c6a8f9e1b355b48f9c05a76e8563
Version < 40f0b1047918539f0b0f795ac65e35336b4c2c78
Status affected
Version f31398570acf0f0804c644006f7bfa9067106b0a
Status affected
Version 401ad99a5ae7180dd9449eac104cb755f442e7f3
Status affected
Version e68dd80ba498265d2266b12dc3459164f4ff0c4a
Status affected
Version 5.10.229
Version < 5.10.261
Status affected
Version 5.15.170
Version < 5.15.212
Status affected
Version 6.1.115
Version < 6.1.178
Status affected
Version 6.6.59
Version < 6.6.145
Status affected
Version 4.19.323
Version < 4.20
Status affected
Version 5.4.285
Version < 5.5
Status affected
Version 6.11.6
Version < 6.12
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.12
Status affected
Version 0
Version < 6.12
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.074
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/87a5bbccc7ff4edb3f42fea387124237d2ba91ee
https://git.kernel.org/stable/c/bd7f202cf77556cff59f68dc30e4cdf40cb6e33b
https://git.kernel.org/stable/c/a3968ad4195d72c8fddcc6c0ef39da95ac98711a
https://git.kernel.org/stable/c/efa9e3b9f3dea2e1ea4c7edf4edc863faef85986
https://git.kernel.org/stable/c/78783fefdc8f36879b1a17efa0d3195ea5f2dc5f
https://git.kernel.org/stable/c/6d99379c58f7f1c6ab2cc7aba01a4f52d71adcfe
https://git.kernel.org/stable/c/5a03a2ee17e8259dde631ed84fd8322db06cb2ae
https://git.kernel.org/stable/c/40f0b1047918539f0b0f795ac65e35336b4c2c78