CVE-2026-72296

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72296
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72296.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72296
Downstream
Published
2026-08-15T05:55:17.250Z
Modified
2026-08-18T03:56:23.088496692Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
Summary
net: ife: require ETH_HLEN to be pullable in ife_decode()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: ife: require ETHHLEN to be pullable in ifedecode()

ife decode may return after making only the outer IFE header and metadata pullable. The caller then passes the decapsulated packet to ethtypetrans(), which expects the inner Ethernet header to be accessible from the linear data area.

With a malformed IFE frame, the inner Ethernet header may still be shorter than ETH_HLEN in the linear area, which can lead to a crash in the original code.

Fix this by extending the pull check in ife_decode() so that the inner Ethernet header is also guaranteed to be pullable before returning.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72296.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ef6980b6becb1afd9d82a4f043749a10ae81bf14
Fixed
70013f9163bef7fbd9fa62f81cf91b2a7ba66163
Fixed
be272e159dfe1207b67332ad6e17adcf59b4ea4b
Fixed
8c8818e52fddb247ff3214622401a4de6ff8482e
Fixed
9433578bff9c100c466a6354574892e55293cb8f
Fixed
1cb42ec10294a55380e52e674b3df2b962648242
Fixed
5526d1997aea6c9bd865ca4d4894b52e799d735c
Fixed
b69ad768cd4a2ef4e07c18492ae85438ed17c7cb
Fixed
9406f6012b7343661efb516a11c62d4db2b62f75

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72296.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.6.0
Fixed
5.10.261
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72296.json"