Critical 9.8Published Aug 15, 2026

CVE-2026-72399net: enetc: check the number of BDs needed for xdp_frame

Updated under an hour ago (Oct 27, 2026, 2:20 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for xdp_frame The size of xdp_redirect_arr array is ENETC_MAX_SKB_FRAGS. However, the number of fragments contained in xdp_frame may be greater than or equal to ENETC_MAX_SKB_FRAGS, which will cause the access to xdp_redirect_arr to be out of bounds.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Aug 17, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	9d2b68cc108db2fdb35022ed2d88cfb305c441a6 builds before 1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before f55276160ffad3e235b657ee4b7304eb99b90e5c; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before cfbc6e9b84dcc0aa2d65c84ea4745af327763209; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 1681cc7974a6123f5d5740b03bc11e4784bd2542; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before d22829101ab675607ad6c3d420fb3ab875f46bbb; from 9d2b68cc108db2fdb35022ed2d88cfb305c441a6 before 555c5475e787802eeae0d2b91c2f66c330db2767	CNA record

References

References

https://git.kernel.org/stable/c/1ecb199b0e6d12ab6c26c0b7edf1a8f4472d9aed
https://git.kernel.org/stable/c/f55276160ffad3e235b657ee4b7304eb99b90e5c
https://git.kernel.org/stable/c/cfbc6e9b84dcc0aa2d65c84ea4745af327763209
https://git.kernel.org/stable/c/1681cc7974a6123f5d5740b03bc11e4784bd2542
https://git.kernel.org/stable/c/d22829101ab675607ad6c3d420fb3ab875f46bbb
https://git.kernel.org/stable/c/555c5475e787802eeae0d2b91c2f66c330db2767

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.