CVE-2026-72065: net: mana: Validate the packet length reported by the NIC
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
net: mana: Validate the packet length reported by the NIC
Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.
Affected Software
1 affected component
Linux Linux kernel
Event History
Aug 15, 2026
CVE Published
via MITRE·05:52 AM
Data Sourced
via MITRE·05:52 AM
Description
Data Sourced
via NVD·06:21 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2026-72065?
CVE-2026-72065 has a risk rating of 37, indicating a moderate vulnerability severity.
2
How do I fix CVE-2026-72065?
To mitigate CVE-2026-72065, update the Linux kernel to the latest version that addresses this vulnerability.
3
What systems are affected by CVE-2026-72065?
CVE-2026-72065 affects the Linux kernel, particularly systems using the mana network driver.
4
What are the potential impacts of CVE-2026-72065?
If exploited, CVE-2026-72065 may lead to invalid memory access or other integrity issues in packet processing.
5
When was CVE-2026-72065 published?
CVE-2026-72065 was published on August 15, 2026.