Improper input validation in Linux kernel - CVE-2026-72065

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU143522

Improper input validation in Linux kernel - CVE-2026-72065

Published: August 16, 2026


Vulnerability identifier: #VU143522
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-72065
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an attacker with physical access to cause a denial of service.

The vulnerability exists due to improper input validation in the mana RX completion queue handling in mana_process_rx_cqe() when processing packet length values reported by the NIC. An attacker with physical access can supply an invalid packet length via a malicious or compromised NIC device to cause a denial of service.

The reported packet length is supplied by the NIC device and is not sufficiently validated before skb processing.


Affected software

Linux kernel
SUSE Linux Micro
SUSE Linux Micro Extras
Ubuntu
linux (Ubuntu package)
linux-kvm (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-raspi (Ubuntu package)
linux-oracle (Ubuntu package)
linux-lowlatency (Ubuntu package)
linux-gke (Ubuntu package)
linux-aws-5.15 (Ubuntu package)
linux-lowlatency-hwe-5.15 (Ubuntu package)
linux-hwe-5.15 (Ubuntu package)
linux-fips (Ubuntu package)
linux-azure-5.15 (Ubuntu package)
linux-realtime (Ubuntu package)
linux-nvidia-tegra (Ubuntu package)
linux-nvidia-tegra-igx (Ubuntu package)
linux-ibm-5.15 (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-gkeop (Ubuntu package)
linux-azure-fde-5.15 (Ubuntu package)
linux-intel-iotg (Ubuntu package)
linux-ibm (Ubuntu package)
linux-intel-iotg-5.15 (Ubuntu package)
linux-oracle-5.15 (Ubuntu package)
linux-gcp-5.15 (Ubuntu package)
linux-nvidia-tegra-5.15 (Ubuntu package)
linux-intel-iot-realtime (Ubuntu package)
linux-gcp-fips (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-azure-fde (Ubuntu package)
linux-hwe-6.8 (Ubuntu package)
linux-lowlatency-hwe-6.8 (Ubuntu package)
linux-azure-fde-6.8 (Ubuntu package)
linux-azure-6.8 (Ubuntu package)
linux-aws-6.8 (Ubuntu package)
linux-oracle-6.8 (Ubuntu package)
linux-nvidia-lowlatency (Ubuntu package)
linux-ibm-6.8 (Ubuntu package)
linux-gcp-6.8 (Ubuntu package)
linux-raspi-realtime (Ubuntu package)
linux-realtime-6.8 (Ubuntu package)
linux-nvidia-bos (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-gcp-7.0 (Ubuntu package)
linux-oracle-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux-aws-7.0 (Ubuntu package)
linux-nvidia-7.0 (Ubuntu package)
kernel-default-devel-debuginfo
kernel-default-debugsource
kernel-obs-build-debugsource
kernel-obs-build
kernel-syms
kernel-default-devel
kernel-64kb-devel
kernel-64kb-debugsource
kernel-64kb
kernel-default
linux-azure-7.0 (Ubuntu package)

How to mitigate CVE-2026-72065

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
linux (Ubuntu package) - addressed in versions 5.15.0-202.212, 6.8.0-147.147, 7.0.0-34.34
linux-kvm (Ubuntu package) - update to 5.15.0-1111.116
linux-aws (Ubuntu package) - addressed in versions 5.15.0-1119.126, 6.8.0-1067.70, 7.0.0-1013.13
linux-gcp (Ubuntu package) - addressed in versions 5.15.0-1120.130, 6.8.0-1071.79, 7.0.0-1013.13
linux-azure (Ubuntu package) - addressed in versions 5.15.0-1125.134, 6.8.0-1070.78, 7.0.0-1016.16, 7.0.0-1017.17
linux-raspi (Ubuntu package) - addressed in versions 5.15.0-1113.116, 6.8.0-1068.72, 7.0.0-1020.20
linux-oracle (Ubuntu package) - addressed in versions 5.15.0-1116.122, 6.8.0-1064.67, 7.0.0-1012.12
linux-lowlatency (Ubuntu package) - addressed in versions 5.15.0-197.207, 6.8.0-147.147.1
linux-gke (Ubuntu package) - addressed in versions 5.15.0-1115.121, 6.8.0-1066.74, 7.0.0-1007.8
linux-aws-5.15 (Ubuntu package) - update to 5.15.0-1119.126~20.04.1
linux-lowlatency-hwe-5.15 (Ubuntu package) - update to 5.15.0-197.207~20.04.1
linux-hwe-5.15 (Ubuntu package) - update to 5.15.0-202.212~20.04.1
linux-fips (Ubuntu package) - addressed in versions 5.15.0-202.212+fips1, 6.8.0-147.147+fips1
linux-azure-5.15 (Ubuntu package) - update to 5.15.0-1125.134~20.04.1
linux-realtime (Ubuntu package) - addressed in versions 5.15.0-1118.127, 6.8.1-1062.63, 7.0.0-34.34.1
linux-nvidia-tegra (Ubuntu package) - addressed in versions 5.15.0-1070.72, 6.8.0-1035.38
linux-nvidia-tegra-igx (Ubuntu package) - update to 5.15.0-1059.59
linux-ibm-5.15 (Ubuntu package) - update to 5.15.0-1113.117~20.04.1
linux-nvidia (Ubuntu package) - addressed in versions 5.15.0-1114.115, 6.8.0-1067.70, 7.0.0-1025.26
linux-gkeop (Ubuntu package) - addressed in versions 5.15.0-1102.110, 6.8.0-1052.56
linux-azure-fde-5.15 (Ubuntu package) - update to 5.15.0-1124.133~20.04.1
linux-intel-iotg (Ubuntu package) - update to 5.15.0-1114.120
linux-ibm (Ubuntu package) - addressed in versions 5.15.0-1113.117, 6.8.0-1067.68, 7.0.0-1014.14
linux-intel-iotg-5.15 (Ubuntu package) - update to 5.15.0-1114.120~20.04.1
linux-oracle-5.15 (Ubuntu package) - update to 5.15.0-1116.122~20.04.1
linux-gcp-5.15 (Ubuntu package) - update to 5.15.0-1120.130~20.04.1
linux-nvidia-tegra-5.15 (Ubuntu package) - update to 5.15.0-1070.72~20.04.1
linux-intel-iot-realtime (Ubuntu package) - update to 5.15.0-1111.115
linux-gcp-fips (Ubuntu package) - addressed in versions 5.15.0-1120.130+fips1, 6.8.0-1071.79+fips1
linux-aws-fips (Ubuntu package) - addressed in versions 5.15.0-1119.126+fips1, 6.8.0-1067.70+fips1
linux-azure-fips (Ubuntu package) - addressed in versions 5.15.0-1125.134+fips1, 6.8.0-1069.77+fips1
linux-azure-fde (Ubuntu package) - update to 6.8.0-1068.75
linux-hwe-6.8 (Ubuntu package) - update to 6.8.0-149.149~22.04.1
linux-lowlatency-hwe-6.8 (Ubuntu package) - update to 6.8.0-149.149.1~22.04.1
linux-azure-fde-6.8 (Ubuntu package) - update to 6.8.0-1068.75~22.04.1
linux-azure-6.8 (Ubuntu package) - update to 6.8.0-1070.78~22.04.1
linux-aws-6.8 (Ubuntu package) - update to 6.8.0-1069.74~22.04.1
linux-oracle-6.8 (Ubuntu package) - update to 6.8.0-1067.71~22.04.1
linux-nvidia-lowlatency (Ubuntu package) - update to 6.8.0-1067.70.1
linux-ibm-6.8 (Ubuntu package) - update to 6.8.0-1069.70~22.04.1
linux-gcp-6.8 (Ubuntu package) - update to 6.8.0-1073.81~22.04.1
linux-raspi-realtime (Ubuntu package) - update to 6.8.0-2056.58
linux-realtime-6.8 (Ubuntu package) - update to 6.8.1-1064.65~22.04.1
linux-nvidia-bos (Ubuntu package) - update to 7.0.0-2022.23
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-34.34~24.04.1
linux-gcp-7.0 (Ubuntu package) - update to 7.0.0-1013.13~24.04.1
linux-oracle-7.0 (Ubuntu package) - update to 7.0.0-1012.12~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1014.14
linux-aws-7.0 (Ubuntu package) - update to 7.0.0-1013.13~24.04.1
linux-nvidia-7.0 (Ubuntu package) - update to 7.0.0-1024.25~24.04.1
kernel-default-devel-debuginfo - update to 6.4.0-159998.55.1
kernel-default-debugsource - update to 6.4.0-159998.55.1
kernel-obs-build-debugsource - update to 6.4.0-159998.55.1
kernel-obs-build - update to 6.4.0-159998.55.1
kernel-syms - update to 6.4.0-159998.55.1
kernel-default-devel - update to 6.4.0-159998.55.1
kernel-64kb-devel - update to 6.4.0-159998.55.1
kernel-64kb-debugsource - update to 6.4.0-159998.55.1
kernel-64kb - update to 6.4.0-159998.55.1
kernel-default - update to 6.4.0-159998.55.1
linux-azure-7.0 (Ubuntu package) - addressed in versions 7.0.0-1016.16~24.04.1, 7.0.0-1017.17~24.04.1

External References

Related Security Bulletins