Improper input validation in Linux kernel - CVE-2026-72319

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU143127

Improper input validation in Linux kernel - CVE-2026-72319

Published: August 16, 2026


Vulnerability identifier: #VU143127
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-72319
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to improper input validation in ip_vs_in_icmp in the IPVS subsystem when processing ICMP error packets from tunnels. A remote attacker can send a specially crafted ICMP error packet to cause a denial of service.

The issue involves inner IP headers not being ensured in skb headroom after outer headers are stripped, and additional length checks were required for the inner headers.


Affected software

Linux kernel
openEuler
Ubuntu
python3-perf-debuginfo
python3-perf
perf-debuginfo
perf
kernel-tools-devel
kernel-tools-debuginfo
kernel-tools
kernel-source
kernel-headers
kernel-devel
kernel-debugsource
kernel-debuginfo
bpftool-debuginfo
bpftool
kernel
kernel-extra-modules
linux (Ubuntu package)
linux-gcp (Ubuntu package)

How to mitigate CVE-2026-72319

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
python3-perf-debuginfo - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
python3-perf - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
perf-debuginfo - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
perf - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel-tools-devel - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel-tools-debuginfo - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel-tools - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel-source - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel-headers - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel-devel - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel-debugsource - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel-debuginfo - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
bpftool-debuginfo - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
bpftool - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel - addressed in versions 6.6.0-145.1.24.161, 6.6.0-145.3.29.160
kernel-extra-modules - update to 6.6.0-145.3.29.160
linux (Ubuntu package) - addressed in versions 7.0.0-34.34, 7.0.0-34.34.1, 7.0.0-34.34~24.04.1, 7.0.0-1012.12~24.04.1, 7.0.0-1013.13, 7.0.0-1013.13~24.04.1, 7.0.0-1014.14, 7.0.0-1020.20
linux-gcp (Ubuntu package) - addressed in versions 7.0.0-1013.13, 7.0.0-1013.13~24.04.1, 7.0.0-1014.14

External References

Related Security Bulletins