CVE-2026-72399net: enetc: check the number of BDs needed for xdp_frame
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr array is ENETC_MAX_SKB_FRAGS. However, the number of fragments contained in xdp_frame may be greater than or equal to ENETC_MAX_SKB_FRAGS, which will cause the access to xdp_redirect_arr to be out of bounds.
- CVSS
- 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 builds before 1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before f55276160ffad3e235b657ee4b7304eb99b90e5c; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before cfbc6e9b84dcc0aa2d65c84ea4745af327763209; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 1681cc7974a6123f5d5740b03bc11e4784bd2542; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before d22829101ab675607ad6c3d420fb3ab875f46bbb; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 555c5475e787802eeae0d2b91c2f66c330db2767 | CNA record |
References
- https://git.kernel.org/stable/c/1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed
- https://git.kernel.org/stable/c/f55276160ffad3e235b657ee4b7304eb99b90e5c
- https://git.kernel.org/stable/c/cfbc6e9b84dcc0aa2d65c84ea4745af327763209
- https://git.kernel.org/stable/c/1681cc7974a6123f5d5740b03bc11e4784bd2542
- https://git.kernel.org/stable/c/d22829101ab675607ad6c3d420fb3ab875f46bbb
- https://git.kernel.org/stable/c/555c5475e787802eeae0d2b91c2f66c330db2767
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.