Log in Start free

Vulnerability · Published Aug 15, 2026 · Assigned by Linux

CVE-2026-72065net: mana: Validate the packet length reported by the NIC

Critical 9.8

In plain English

A critical-severity improper input validation in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.7%top 45.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.187-1DEBIAN-CVE-2026-72065
Debian:13linux6.12.101-1DEBIAN-CVE-2026-72065
Debian:14linux7.1.5-1DEBIAN-CVE-2026-72065
Debian:12linux-6.126.12.101-1~deb12u1DEBIAN-CVE-2026-72065
Ubuntu:22.04:LTSlinux5.15.0-202.212UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux6.8.0-147.147UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux7.0.0-34.34UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux7.0.0-34.34USN-8816-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-aws5.15.0-1119.126UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-aws6.8.0-1067.70UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-aws7.0.0-1013.13UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-aws7.0.0-1013.13USN-8816-1
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-aws-7.07.0.0-1013.13~24.04.1USN-8816-1
Ubuntu:24.04:LTSlinux-aws-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-azure5.15.0-1125.134UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure6.8.0-1070.78UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-azure7.0.0-1017.17UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1070.78~22.04.1UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-7.07.0.0-1017.17~24.04.1UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1124.133UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1068.75UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-azure-fde7.0.0-1016.16UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1068.75~22.04.1UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-fde-7.07.0.0-1016.16~24.04.1UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-gcp5.15.0-1120.130UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-gcp6.8.0-1071.79UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-gcp7.0.0-1013.13UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-gcp7.0.0-1013.13USN-8816-2
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1013.13~24.04.1USN-8816-2
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-gke5.15.0-1115.121UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-gke6.8.0-1066.74UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-gke7.0.0-1007.8UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-gke7.0.0-1007.8USN-8816-4
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1102.110UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1052.56UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-34.34~24.04.1UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-34.34~24.04.1USN-8816-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1113.117UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-ibm6.8.0-1067.68UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-ibm7.0.0-1014.14UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-ibm7.0.0-1014.14USN-8816-1
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1114.120UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-kvm5.15.0-1111.116UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-197.207UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-147.147.1UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1114.115UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-nvidia-7.07.0.0-1024.25~24.04.1UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-nvidia-bos7.0.0-2022.23UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1070.72UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1035.38UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1059.59UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1014.14UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1014.14USN-8816-2
Ubuntu:22.04:LTSlinux-oracle5.15.0-1116.122UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-oracle6.8.0-1064.67UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-oracle7.0.0-1012.12UBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-oracle7.0.0-1012.12USN-8816-1
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1012.12~24.04.1UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1012.12~24.04.1USN-8816-3
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-raspi7.0.0-1020.20USN-8816-1
Ubuntu:26.04:LTSlinux-raspi7.0.0-1020.20UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-realtime7.0.0-34.34.1USN-8816-1
Ubuntu:26.04:LTSlinux-realtime7.0.0-34.34.1UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-72065
Ubuntu:26.04:LTSlinux-riscv7.0.0-34.34.1UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-34.34.1~24.04.1UBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-vmware6.8.0-1008.8UBUNTU-CVE-2026-72065
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-72065
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2026-72065

Affected products (as reported)

VendorProductVersions
Linux Linux ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f – before a631f82f89c76084ad5b2b9c043d3b391ffa56d8ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f – before d2568e64d01f480200063fadd67d6938f676c66fca9c54d2d6a5ab2430c4eda364c77125d62e5e0f – before 2e276b14b6d378372bf0152df89286cbe7632fb0ca9c54d2d6a5ab2430c4eda364c77125d62e5e0f – before 6080189291d958604dcefe513a13900835ac982fca9c54d2d6a5ab2430c4eda364c77125d62e5e0f – before 6d13eaa13341a8f80aaf86f78591e1b1d393711dca9c54d2d6a5ab2430c4eda364c77125d62e5e0f – before 282c5214ca4eb3799158c76782646e86d2945d1bca9c54d2d6a5ab2430c4eda364c77125d62e5e0f – before 2e2a83b4998af4384e677d3b2ac08565274279bf
Linux Linux 5.13

Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References