Out-of-bounds write in Linux kernel - CVE-2026-72399

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU143041

Out-of-bounds write in Linux kernel - CVE-2026-72399

Published: August 15, 2026


Vulnerability identifier: #VU143041
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-72399
CWE-ID: CWE-787
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to an out-of-bounds write in enetc_xdp_xmit when processing xdp_frame structures with too many fragments. A local user can provide a crafted xdp_frame with more fragments than ENETC_MAX_SKB_FRAGS to cause a denial of service.

The issue occurs because the xdp_redirect_arr array is sized to ENETC_MAX_SKB_FRAGS while an xdp_frame may contain a greater number of fragments.


Affected software

Linux kernel
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Availability Extension 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Linux Enterprise Live Patching
SUSE Real Time Module
Public Cloud Module
Legacy Module
Development Tools Module
Basesystem Module
openSUSE Leap
Ubuntu
linux (Ubuntu package)
linux-lowlatency (Ubuntu package)
linux-raspi (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-aws (Ubuntu package)
linux-ibm (Ubuntu package)
linux-oracle (Ubuntu package)
linux-azure-fde (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-realtime (Ubuntu package)
linux-hwe-6.8 (Ubuntu package)
linux-lowlatency-hwe-6.8 (Ubuntu package)
linux-fips (Ubuntu package)
linux-azure-fde-6.8 (Ubuntu package)
linux-aws-6.8 (Ubuntu package)
linux-nvidia-tegra (Ubuntu package)
linux-azure-6.8 (Ubuntu package)
linux-oracle-6.8 (Ubuntu package)
linux-nvidia-lowlatency (Ubuntu package)
linux-gkeop (Ubuntu package)
linux-gke (Ubuntu package)
linux-ibm-6.8 (Ubuntu package)
linux-gcp-6.8 (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-gcp-fips (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-raspi-realtime (Ubuntu package)
linux-realtime-6.8 (Ubuntu package)
linux-nvidia-bos (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-gcp-7.0 (Ubuntu package)
linux-oracle-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux-aws-7.0 (Ubuntu package)
linux-nvidia-7.0 (Ubuntu package)
kernel-livepatch-6_4_0-150600_23_138-default-debuginfo
kernel-livepatch-SLE15-SP6_Update_32-debugsource
kernel-livepatch-6_4_0-150600_23_138-default
kernel-livepatch-6_4_0-150700_7_78-rt-debuginfo
kernel-livepatch-6_4_0-150700_7_78-rt
kernel-livepatch-SLE15-SP7-RT_Update_21-debugsource
kernel-livepatch-6_4_0-150700_53_84-default
kernel-livepatch-6_4_0-150700_53_84-default-debuginfo
kernel-livepatch-SLE15-SP7_Update_22-debugsource
kernel-default-livepatch-devel
dtb-xilinx
cluster-md-kmp-64kb
kernel-64kb-extra
gfs2-kmp-64kb
kernel-64kb-devel-debuginfo
dlm-kmp-64kb-debuginfo
dtb-exynos
dtb-lg
dtb-marvell
dtb-socionext
kernel-default-livepatch
kernel-docs
kernel-source
kernel-devel
kernel-macros
kernel-default
kernel-syms
gfs2-kmp-default-debuginfo
kernel-default-debugsource
cluster-md-kmp-default-debuginfo
kernel-default-debuginfo
ocfs2-kmp-default-debuginfo
cluster-md-kmp-default
dtb-freescale
kernel-64kb-optional-debuginfo
dtb-qcom
kernel-64kb-extra-debuginfo
dtb-renesas
kernel-64kb-debuginfo
dtb-hisilicon
reiserfs-kmp-64kb
gfs2-kmp-64kb-debuginfo
dtb-rockchip
dtb-amd
dtb-sprd
cluster-md-kmp-64kb-debuginfo
ocfs2-kmp-64kb-debuginfo
dtb-nvidia
reiserfs-kmp-64kb-debuginfo
dtb-broadcom
dtb-amlogic
dlm-kmp-64kb
dtb-allwinner
dtb-altera
dtb-apple
kernel-64kb-optional
kselftests-kmp-64kb-debuginfo
kselftests-kmp-64kb
kernel-64kb-devel
dtb-mediatek
ocfs2-kmp-64kb
reiserfs-kmp-default-debuginfo
dtb-cavium
kernel-kvmsmall-vdso-debuginfo
kernel-64kb
kernel-debug
kernel-debug-devel-debuginfo
kernel-debug-debugsource
kernel-debug-debuginfo
kernel-debug-devel
kernel-kvmsmall-vdso
kernel-debug-vdso
kernel-default-vdso-debuginfo
kernel-default-vdso
kernel-debug-vdso-debuginfo
dlm-kmp-default-debuginfo
kernel-kvmsmall-debuginfo
kernel-kvmsmall-devel
kernel-kvmsmall-debugsource
kernel-kvmsmall-devel-debuginfo
kernel-docs-html
kernel-source-vanilla
kernel-kvmsmall
kernel-zfcpdump
kernel-zfcpdump-debugsource
kernel-zfcpdump-debuginfo
dtb-arm
kernel-obs-build-debugsource
kernel-default-devel-debuginfo
kernel-obs-build
ocfs2-kmp-default
dtb-aarch64
kernel-default-devel
reiserfs-kmp-default
gfs2-kmp-default
dlm-kmp-default
dtb-apm
dtb-amazon
kernel-64kb-debugsource
kselftests-kmp-default
kernel-default-optional-debuginfo
kernel-default-extra-debuginfo
kernel-default-optional
kselftests-kmp-default-debuginfo
kernel-obs-qa
kernel-default-extra
kernel-default-base-rebuild
kernel-default-base
gfs2-kmp-rt
ocfs2-kmp-rt-debuginfo
cluster-md-kmp-rt-debuginfo
kernel-rt-debuginfo
kernel-rt-devel-debuginfo
kernel-rt-devel
dlm-kmp-rt
kernel-syms-rt
kernel-rt-debugsource
cluster-md-kmp-rt
dlm-kmp-rt-debuginfo
kernel-rt
kernel-devel-rt
kernel-source-rt
ocfs2-kmp-rt
gfs2-kmp-rt-debuginfo
kernel-azure-devel-debuginfo
kernel-azure-debuginfo
kernel-azure-devel
kernel-azure-debugsource
kernel-azure
linux-azure-7.0 (Ubuntu package)

How to mitigate CVE-2026-72399

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - addressed in versions 6.8.0-147.147, 7.0.0-34.34
linux-lowlatency (Ubuntu package) - update to 6.8.0-147.147.1
linux-raspi (Ubuntu package) - addressed in versions 6.8.0-1068.72, 7.0.0-1020.20
linux-gcp (Ubuntu package) - addressed in versions 6.8.0-1071.79, 7.0.0-1013.13
linux-azure (Ubuntu package) - addressed in versions 6.8.0-1071.79, 7.0.0-1016.16, 7.0.0-1017.17
linux-aws (Ubuntu package) - addressed in versions 6.8.0-1067.70, 7.0.0-1013.13
linux-ibm (Ubuntu package) - addressed in versions 6.8.0-1067.68, 7.0.0-1014.14
linux-oracle (Ubuntu package) - addressed in versions 6.8.0-1064.67, 7.0.0-1012.12
linux-azure-fde (Ubuntu package) - update to 6.8.0-1069.76
linux-nvidia (Ubuntu package) - addressed in versions 6.8.0-1067.70, 7.0.0-1025.26
linux-realtime (Ubuntu package) - addressed in versions 6.8.1-1062.63, 7.0.0-34.34.1
linux-hwe-6.8 (Ubuntu package) - update to 6.8.0-149.149~22.04.1
linux-lowlatency-hwe-6.8 (Ubuntu package) - update to 6.8.0-149.149.1~22.04.1
linux-fips (Ubuntu package) - update to 6.8.0-147.147+fips1
linux-azure-fde-6.8 (Ubuntu package) - update to 6.8.0-1071.78~22.04.1
linux-aws-6.8 (Ubuntu package) - update to 6.8.0-1069.74~22.04.1
linux-nvidia-tegra (Ubuntu package) - update to 6.8.0-1035.38
linux-azure-6.8 (Ubuntu package) - update to 6.8.0-1073.82~22.04.1
linux-oracle-6.8 (Ubuntu package) - update to 6.8.0-1067.71~22.04.1
linux-nvidia-lowlatency (Ubuntu package) - update to 6.8.0-1067.70.1
linux-gkeop (Ubuntu package) - update to 6.8.0-1052.56
linux-gke (Ubuntu package) - addressed in versions 6.8.0-1066.74, 7.0.0-1007.8
linux-ibm-6.8 (Ubuntu package) - update to 6.8.0-1069.70~22.04.1
linux-gcp-6.8 (Ubuntu package) - update to 6.8.0-1073.81~22.04.1
linux-aws-fips (Ubuntu package) - update to 6.8.0-1067.70+fips1
linux-gcp-fips (Ubuntu package) - update to 6.8.0-1071.79+fips1
linux-azure-fips (Ubuntu package) - update to 6.8.0-1071.79+fips1
linux-raspi-realtime (Ubuntu package) - update to 6.8.0-2056.58
linux-realtime-6.8 (Ubuntu package) - update to 6.8.1-1064.65~22.04.1
linux-nvidia-bos (Ubuntu package) - update to 7.0.0-2022.23
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-34.34~24.04.1
linux-gcp-7.0 (Ubuntu package) - update to 7.0.0-1013.13~24.04.1
linux-oracle-7.0 (Ubuntu package) - update to 7.0.0-1012.12~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1014.14
linux-aws-7.0 (Ubuntu package) - update to 7.0.0-1013.13~24.04.1
linux-nvidia-7.0 (Ubuntu package) - update to 7.0.0-1024.25~24.04.1
kernel-livepatch-6_4_0-150600_23_138-default-debuginfo - update to 1-150600.13.3.1
kernel-livepatch-SLE15-SP6_Update_32-debugsource - update to 1-150600.13.3.1
kernel-livepatch-6_4_0-150600_23_138-default - update to 1-150600.13.3.1
kernel-livepatch-6_4_0-150700_7_78-rt-debuginfo - update to 1-150700.1.3.1
kernel-livepatch-6_4_0-150700_7_78-rt - update to 1-150700.1.3.1
kernel-livepatch-SLE15-SP7-RT_Update_21-debugsource - update to 1-150700.1.3.1
kernel-livepatch-6_4_0-150700_53_84-default - update to 1-150700.15.3.1
kernel-livepatch-6_4_0-150700_53_84-default-debuginfo - update to 1-150700.15.3.1
kernel-livepatch-SLE15-SP7_Update_22-debugsource - update to 1-150700.15.3.1
kernel-default-livepatch-devel - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dtb-xilinx - update to 6.4.0-150600.23.138.1
cluster-md-kmp-64kb - update to 6.4.0-150600.23.138.1
kernel-64kb-extra - update to 6.4.0-150600.23.138.1
gfs2-kmp-64kb - update to 6.4.0-150600.23.138.1
kernel-64kb-devel-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dlm-kmp-64kb-debuginfo - update to 6.4.0-150600.23.138.1
dtb-exynos - update to 6.4.0-150600.23.138.1
dtb-lg - update to 6.4.0-150600.23.138.1
dtb-marvell - update to 6.4.0-150600.23.138.1
dtb-socionext - update to 6.4.0-150600.23.138.1
kernel-default-livepatch - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-docs - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-source - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-devel - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-macros - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-default - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-syms - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
gfs2-kmp-default-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-default-debugsource - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
cluster-md-kmp-default-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-default-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
ocfs2-kmp-default-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
cluster-md-kmp-default - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dtb-freescale - update to 6.4.0-150600.23.138.1
kernel-64kb-optional-debuginfo - update to 6.4.0-150600.23.138.1
dtb-qcom - update to 6.4.0-150600.23.138.1
kernel-64kb-extra-debuginfo - update to 6.4.0-150600.23.138.1
dtb-renesas - update to 6.4.0-150600.23.138.1
kernel-64kb-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dtb-hisilicon - update to 6.4.0-150600.23.138.1
reiserfs-kmp-64kb - update to 6.4.0-150600.23.138.1
gfs2-kmp-64kb-debuginfo - update to 6.4.0-150600.23.138.1
dtb-rockchip - update to 6.4.0-150600.23.138.1
dtb-amd - update to 6.4.0-150600.23.138.1
dtb-sprd - update to 6.4.0-150600.23.138.1
cluster-md-kmp-64kb-debuginfo - update to 6.4.0-150600.23.138.1
ocfs2-kmp-64kb-debuginfo - update to 6.4.0-150600.23.138.1
dtb-nvidia - update to 6.4.0-150600.23.138.1
reiserfs-kmp-64kb-debuginfo - update to 6.4.0-150600.23.138.1
dtb-broadcom - update to 6.4.0-150600.23.138.1
dtb-amlogic - update to 6.4.0-150600.23.138.1
dlm-kmp-64kb - update to 6.4.0-150600.23.138.1
dtb-allwinner - update to 6.4.0-150600.23.138.1
dtb-altera - update to 6.4.0-150600.23.138.1
dtb-apple - update to 6.4.0-150600.23.138.1
kernel-64kb-optional - update to 6.4.0-150600.23.138.1
kselftests-kmp-64kb-debuginfo - update to 6.4.0-150600.23.138.1
kselftests-kmp-64kb - update to 6.4.0-150600.23.138.1
kernel-64kb-devel - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dtb-mediatek - update to 6.4.0-150600.23.138.1
ocfs2-kmp-64kb - update to 6.4.0-150600.23.138.1
reiserfs-kmp-default-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dtb-cavium - update to 6.4.0-150600.23.138.1
kernel-kvmsmall-vdso-debuginfo - update to 6.4.0-150600.23.138.1
kernel-64kb - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-debug - update to 6.4.0-150600.23.138.1
kernel-debug-devel-debuginfo - update to 6.4.0-150600.23.138.1
kernel-debug-debugsource - update to 6.4.0-150600.23.138.1
kernel-debug-debuginfo - update to 6.4.0-150600.23.138.1
kernel-debug-devel - update to 6.4.0-150600.23.138.1
kernel-kvmsmall-vdso - update to 6.4.0-150600.23.138.1
kernel-debug-vdso - update to 6.4.0-150600.23.138.1
kernel-default-vdso-debuginfo - update to 6.4.0-150600.23.138.1
kernel-default-vdso - update to 6.4.0-150600.23.138.1
kernel-debug-vdso-debuginfo - update to 6.4.0-150600.23.138.1
dlm-kmp-default-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-kvmsmall-debuginfo - update to 6.4.0-150600.23.138.1
kernel-kvmsmall-devel - update to 6.4.0-150600.23.138.1
kernel-kvmsmall-debugsource - update to 6.4.0-150600.23.138.1
kernel-kvmsmall-devel-debuginfo - update to 6.4.0-150600.23.138.1
kernel-docs-html - update to 6.4.0-150600.23.138.1
kernel-source-vanilla - update to 6.4.0-150600.23.138.1
kernel-kvmsmall - update to 6.4.0-150600.23.138.1
kernel-zfcpdump - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-zfcpdump-debugsource - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-zfcpdump-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dtb-arm - update to 6.4.0-150600.23.138.1
kernel-obs-build-debugsource - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-default-devel-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-obs-build - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
ocfs2-kmp-default - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dtb-aarch64 - update to 6.4.0-150600.23.138.1
kernel-default-devel - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
reiserfs-kmp-default - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
gfs2-kmp-default - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dlm-kmp-default - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
dtb-apm - update to 6.4.0-150600.23.138.1
dtb-amazon - update to 6.4.0-150600.23.138.1
kernel-64kb-debugsource - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kselftests-kmp-default - update to 6.4.0-150600.23.138.1
kernel-default-optional-debuginfo - update to 6.4.0-150600.23.138.1
kernel-default-extra-debuginfo - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-default-optional - update to 6.4.0-150600.23.138.1
kselftests-kmp-default-debuginfo - update to 6.4.0-150600.23.138.1
kernel-obs-qa - update to 6.4.0-150600.23.138.1
kernel-default-extra - addressed in versions 6.4.0-150600.23.138.1, 6.4.0-150700.53.84.1
kernel-default-base-rebuild - update to 6.4.0-150600.23.138.1.150600.12.64.1
kernel-default-base - addressed in versions 6.4.0-150600.23.138.1.150600.12.64.1, 6.4.0-150700.53.84.1.150700.17.47.1
gfs2-kmp-rt - update to 6.4.0-150700.7.78.1
ocfs2-kmp-rt-debuginfo - update to 6.4.0-150700.7.78.1
cluster-md-kmp-rt-debuginfo - update to 6.4.0-150700.7.78.1
kernel-rt-debuginfo - update to 6.4.0-150700.7.78.1
kernel-rt-devel-debuginfo - update to 6.4.0-150700.7.78.1
kernel-rt-devel - update to 6.4.0-150700.7.78.1
dlm-kmp-rt - update to 6.4.0-150700.7.78.1
kernel-syms-rt - update to 6.4.0-150700.7.78.1
kernel-rt-debugsource - update to 6.4.0-150700.7.78.1
cluster-md-kmp-rt - update to 6.4.0-150700.7.78.1
dlm-kmp-rt-debuginfo - update to 6.4.0-150700.7.78.1
kernel-rt - update to 6.4.0-150700.7.78.1
kernel-devel-rt - update to 6.4.0-150700.7.78.1
kernel-source-rt - update to 6.4.0-150700.7.78.1
ocfs2-kmp-rt - update to 6.4.0-150700.7.78.1
gfs2-kmp-rt-debuginfo - update to 6.4.0-150700.7.78.1
kernel-azure-devel-debuginfo - update to 6.4.0-150700.53.84.1
kernel-azure-debuginfo - update to 6.4.0-150700.53.84.1
kernel-azure-devel - update to 6.4.0-150700.53.84.1
kernel-azure-debugsource - update to 6.4.0-150700.53.84.1
kernel-azure - update to 6.4.0-150700.53.84.1
linux-azure-7.0 (Ubuntu package) - addressed in versions 7.0.0-1016.16~24.04.1, 7.0.0-1017.17~24.04.1

External References

Related Security Bulletins