CVE-2026-72399
Critical
Description
In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr array is ENETC_MAX_SKB_FRAGS. However, the number of fragments contained in xdp_frame may be greater than or equal to ENETC_MAX_SKB_FRAGS, which will cause the access to xdp_redirect_arr to be out of bounds.
SeverityCritical
CVSS9.8
Exploit probability53. percentile0.7%
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linux1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed, f55276160ffad3e235b657ee4b7304eb99b90e5c, cfbc6e9b84dcc0aa2d65c84ea4745af327763209, 1681cc7974a6123f5d5740b03bc11e4784bd2542, d22829101ab675607ad6c3d420fb3ab875f46bbb, 555c5475e787802eeae0d2b91c2f66c330db2767 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 ≤ v < 1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed, 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 ≤ v < f55276160ffad3e235b657ee4b7304eb99b90e5c, 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 ≤ v < cfbc6e9b84dcc0aa2d65c84ea4745af327763209, 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 ≤ v < 1681cc7974a6123f5d5740b03bc11e4784bd2542, 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 ≤ v < d22829101ab675607ad6c3d420fb3ab875f46bbb, 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 ≤ v < 555c5475e787802eeae0d2b91c2f66c330db2767, 5.13 | 1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed, f55276160ffad3e235b657ee4b7304eb99b90e5c, cfbc6e9b84dcc0aa2d65c84ea4745af327763209, 1681cc7974a6123f5d5740b03bc11e4784bd2542, d22829101ab675607ad6c3d420fb3ab875f46bbb, 555c5475e787802eeae0d2b91c2f66c330db2767 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.