CVE-2026-72057

CVE CVE-2026-72057EUVD EUVD-2026-59015Published 2026-08-15T05:52:12.000ZLast changed 2026-08-17T05:39:53.000ZCVSS 8.2

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across defragmentation tcf_ct_handle_fragments() calls nf_ct_handle_fragments() without saving and restoring skb->cb. The defrag helper clears IPCB/IP6CB, which aliases the tc_skb_cb/qdisc_skb_cb control buffer. Fragmented traffic through act_ct therefore loses qdisc metadata such as pkt_segs and can trigger WARN_ON_ONCE() in qdisc_pkt_segs() when panic_on_warn is enabled. Save and restore the full tc_skb_cb around nf_ct_handle_fragments(), matching the pattern used by ovs_ct_handle_fragments().

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux ec624fe740b416fb68d536b37fb8eef46f90b5c2 <5c3ae5f6c7c6de73ea9b6a75154fe4ed343e1bac; patch: 6.18.40; patch: 7.1.5; patch: 0; ec624fe740b416fb68d536b37fb8eef46f90b5c2 <9092e15defbe6c7bc241c306093ca9d358a578e7; patch: 6.6.145; ec624fe740b416fb68d536b37fb8eef46f90b5c2 <f7f45ceb855d9ba1cba594fb3f383255f7013fad; 5.16; ec624fe740b416fb68d536b37fb8eef46f90b5c2 <2400c4b05d58834b994500a9eec90a37db44187c; 0d76daf2013ce1da20eab5e26bd81d983e1c18fb; 5.15.13 <5.16; patch: 6.12.97; ec624fe740b416fb68d536b37fb8eef46f90b5c2 <b3d835407846134b0d54637c0281b39bebef831d; patch: 7.2

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.