SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-72057

HIGH · CVSS 8.2 EPSS 0.58%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's traffic control subsystem, specifically the act_ct module, where fragmented packets lose critical queueing metadata due to improper handling of the skb control buffer during defragmentation. This can lead to unexpected behavior, including potential system warnings or crashes when certain configurations are enabled. Organizations using Linux systems that rely on advanced traffic control features should prioritize patching this vulnerability to maintain system stability and performance.

CVE
CVE-2026-72057
Severity
HIGH
CVSS
8.2
EPSS
0.58%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across defragmentation tcf_ct_handle_fragments() calls nf_ct_handle_fragments() without saving and restoring skb->cb. The defrag helper clears IPCB/IP6CB, which aliases the tc_skb_cb/qdisc_skb_cb control buffer. Fragmented traffic through act_ct therefore loses qdisc metadata such as pkt_segs and can trigger WARN_ON_ONCE() in qdisc_pkt_segs() when panic_on_warn is enabled. Save and restore the full tc_skb_cb around nf_ct_handle_fragments(), matching the pattern used by ovs_ct_handle_fragments().