CVE-2026-72345

High

Description

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5_lag_create_single_fdb() starts from i, so the failed index itself is rolled back. That can operate on uninitialized state or double-tear-down a rule the add_one path already self-rolled-back. Start the rollback from i - 1 so only successfully-installed entries are undone.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux0be672071d6e8c4d3be6a8f796d8e47198763770, 40cc06bf71476932e5d139fa326dcd0372766e16, 0f0e4ae6975c773f7854fc48932a267f6c79088f, 6.13 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxddbb5ddc43ad000a984149db5af1133433938404 ≤ v < 0be672071d6e8c4d3be6a8f796d8e47198763770, ddbb5ddc43ad000a984149db5af1133433938404 ≤ v < 40cc06bf71476932e5d139fa326dcd0372766e16, ddbb5ddc43ad000a984149db5af1133433938404 ≤ v < 0f0e4ae6975c773f7854fc48932a267f6c79088f, 8330e9f0214c0f0b73c57b3f3f619b64c8035029, 6.12.113 ≤ v < 6.13, 6.140be672071d6e8c4d3be6a8f796d8e47198763770, 40cc06bf71476932e5d139fa326dcd0372766e16, 0f0e4ae6975c773f7854fc48932a267f6c79088f, 6.13

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.