Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.
CVSS Score
CRITICAL
References
- https://git.kernel.org/stable/c/282c5214ca4eb3799158c76782646e86d2945d1b
- https://git.kernel.org/stable/c/2e276b14b6d378372bf0152df89286cbe7632fb0
- https://git.kernel.org/stable/c/2e2a83b4998af4384e677d3b2ac08565274279bf
- https://git.kernel.org/stable/c/6080189291d958604dcefe513a13900835ac982f
- https://git.kernel.org/stable/c/6d13eaa13341a8f80aaf86f78591e1b1d393711d
- https://git.kernel.org/stable/c/a631f82f89c76084ad5b2b9c043d3b391ffa56d8
- https://git.kernel.org/stable/c/d2568e64d01f480200063fadd67d6938f676c66f
FAQ
What is CVE-2026-72065?
CVE-2026-72065 is a vulnerability with a CVSS score of 9.8 (CRITICAL). In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to s...
How severe is CVE-2026-72065?
CVE-2026-72065 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-72065?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.