In the Linux kernel, the following vulnerability has been resolved:

net: enetc: check the number of BDs needed for xdp_frame

The size of xdp_redirect_arr array is ENETC_MAX_SKB_FRAGS. However, the
number of fragments contained in xdp_frame may be greater than or equal
to ENETC_MAX_SKB_FRAGS, which will cause the access to xdp_redirect_arr
to be out of bounds.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
9d2b68cc108db2fdb35022ed2d88cfb305c441a6 affected < 1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed
9d2b68cc108db2fdb35022ed2d88cfb305c441a6 affected < f55276160ffad3e235b657ee4b7304eb99b90e5c
9d2b68cc108db2fdb35022ed2d88cfb305c441a6 affected < cfbc6e9b84dcc0aa2d65c84ea4745af327763209
9d2b68cc108db2fdb35022ed2d88cfb305c441a6 affected < 1681cc7974a6123f5d5740b03bc11e4784bd2542
9d2b68cc108db2fdb35022ed2d88cfb305c441a6 affected < d22829101ab675607ad6c3d420fb3ab875f46bbb
9d2b68cc108db2fdb35022ed2d88cfb305c441a6 affected < 555c5475e787802eeae0d2b91c2f66c330db2767
Linux Linux affected
Version Status Constraints
5.13 affected —
0 unaffected < 5.13
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/1681cc7974a6123f5d5740b03bc11e4784bd2542 cve-icon cve-icon
https://git.kernel.org/stable/c/1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed cve-icon cve-icon
https://git.kernel.org/stable/c/555c5475e787802eeae0d2b91c2f66c330db2767 cve-icon cve-icon
https://git.kernel.org/stable/c/cfbc6e9b84dcc0aa2d65c84ea4745af327763209 cve-icon cve-icon
https://git.kernel.org/stable/c/d22829101ab675607ad6c3d420fb3ab875f46bbb cve-icon cve-icon
https://git.kernel.org/stable/c/f55276160ffad3e235b657ee4b7304eb99b90e5c cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr array is ENETC_MAX_SKB_FRAGS. However, the number of fragments contained in xdp_frame may be greater than or equal to ENETC_MAX_SKB_FRAGS, which will cause the access to xdp_redirect_arr to be out of bounds.
Title net: enetc: check the number of BDs needed for xdp_frame
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:56:24.926Z

Reserved: 2026-08-09T03:40:39.925Z

Link: CVE-2026-72399

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:13.460

Modified: 2026-08-15T06:22:13.460

Link: CVE-2026-72399

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.