CVE-2026-72057
Last modified
CVE-2026-72057 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across defragmentation tcf_ct_handle_fragments() calls nf_ct_handle_fragments() without saving and restoring skb->cb. The defrag helper clears IPCB/IP6CB, which aliases the tc_skb_cb/qdisc_skb_cb control buffer. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across defragmentation tcf_ct_handle_fragments() calls nf_ct_handle_fragments() without saving and restoring skb->cb. The defrag helper clears IPCB/IP6CB, which aliases the tc_skb_cb/qdisc_skb_cb control buffer. Fragmented traffic through act_ct therefore loses qdisc metadata such as pkt_segs and can trigger WARN_ON_ONCE() in qdisc_pkt_segs() when panic_on_warn is enabled. Save and restore the full tc_skb_cb around nf_ct_handle_fragments(), matching the pattern used by ovs_ct_handle_fragments().
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 0d76daf2013ce1da20eab5e26bd81d983e1c18fb, < fb080b6f54835d5d4d11ce3122800e6f0f6689e6; >= ec624fe740b416fb68d536b37fb8eef46f90b5c2, < 67d6b00a54446c008f52cf70fc0c2ad0c712f85d; >= ec624fe740b416fb68d536b37fb8eef46f90b5c2, < 2400c4b05d58834b994500a9eec90a37db44187c; >= ec624fe740b416fb68d536b37fb8eef46f90b5c2, < 5c3ae5f6c7c6de73ea9b6a75154fe4ed343e1bac; >= ec624fe740b416fb68d536b37fb8eef46f90b5c2, < b3d835407846134b0d54637c0281b39bebef831d; >= ec624fe740b416fb68d536b37fb8eef46f90b5c2, < f7f45ceb855d9ba1cba594fb3f383255f7013fad; >= ec624fe740b416fb68d536b37fb8eef46f90b5c2, < 9092e15defbe6c7bc241c306093ca9d358a578e7; >= 5.15.13, < 5.15.217 |
| Linux | Linux | 5.16 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-72057?
How severe is CVE-2026-72057?
How do I fix CVE-2026-72057?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-72051In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-72052In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-72053In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-72054In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-72055In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-72056In the Linux kernel, the following vulnerability has been re…
- CVE-2026-72058In the Linux kernel, the following vulnerability has been re…
- CVE-2026-72059In the Linux kernel, the following vulnerability has been re…
- CVE-2026-7206A security flaw has been discovered in dubydu sqlite-mcp up …7.3
- CVE-2026-72060In the Linux kernel, the following vulnerability has been re…
- CVE-2026-72061In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-72062In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-72057?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST