CVE-2026-72411

The CVE-2026-72411 issue affects the Linux kernel’s DSA mxl862xx code. A use-after-free could occur when handling an MDIO CRC error: mxl862xx_crc_err_work_fn() iterates DSA ports and closes CPU conduits, while mxl862xx_remove() unregisters the switch and cancels the work. If CRC error work runs a...

CVE-2026-72411

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: fix use-after-free of DSA ports in crcerrwork Upon an MDIO CRC error mxl862xxcrcerrworkfn walks the DSA ports and closes the CPU port conduits: dsaswitchforeachcpuportdp, priv-ds devclosedp-conduit;...

CVE-2026-72409 net: mvneta: re-enable percpu interrupt on resume

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x, mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR mvnetapercpuisr calls disablepercpuirq to mask the MPIC per-CPU...

CVE-2026-72409

CVE-2026-72409 — Linux kernel mvneta per-CPU interrupt resume issue Affected: Linux kernel running on Marvell MPIC platforms (Armada 370/XP/38x) with mvneta NIC driver.Root cause: During NAPI, the ISR disables the per-CPU interrupt (disable_percpu_irq) and schedules NAPI poll; if suspend occurs b...

CVE-2026-72409 net: mvneta: re-enable percpu interrupt on resume

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x, mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR mvnetapercpuisr calls disablepercpuirq to mask the MPIC per-CPU...

CVE-2026-72410 octeontx2-af: Validate NIX maximum LFs correctly

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink command but that can be done before assigning any LFs to a PF/VF. The condition used to check whether any LFs are assigned is...

CVE-2026-72410

In the Linux kernel, the octeontx2-af component fixes an issue where the NIX maximum number of LFs could be set via devlink before any LFs were assigned to a PF/VF. The root cause was an incorrect condition used to determine if LFs were assigned; the patch corrects this check. This vulnerability ...

EUVD-2026-59309

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink command but that can be done before assigning any LFs to a PF/VF. The condition used to check whether any LFs are assigned is...

CVE-2026-72410 octeontx2-af: Validate NIX maximum LFs correctly

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink command but that can be done before assigning any LFs to a PF/VF. The condition used to check whether any LFs are assigned is...

EUVD-2026-59308

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x, mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR mvnetapercpuisr calls disablepercpuirq to mask the MPIC per-CPU...

CVE-2026-72410

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink command but that can be done before assigning any LFs to a PF/VF. The condition used to check whether any LFs are assigned is...

CVE-2026-72409

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms Armada 370/XP/38x, mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR mvnetapercpuisr calls disablepercpuirq to mask the MPIC per-CPU...

CVE-2026-72408 geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint

In the Linux kernel, the following vulnerability has been resolved: geneve: gate GRO hint in genevegrocomplete on gs-grohint genevegroreceive reads the GRO hint through geneveskgrohintoff, which honours it only when the socket enabled IFLAGENEVEGROHINT gs-grohint. genevegrocomplete instead calls...

CVE-2026-72408

Summary of the CVE-2026-72408 vulnerability (Linux kernel): The issue, in geneve GRO handling, arises when geneve_gro_complete() processes a GRO hint unconditionally while geneve_gro_receive() may honor the hint only if gs->gro_hint is enabled. This mismatch allowed an attacker-supplied GRO hi...

CVE-2026-72408 geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint

In the Linux kernel, the following vulnerability has been resolved: geneve: gate GRO hint in genevegrocomplete on gs-grohint genevegroreceive reads the GRO hint through geneveskgrohintoff, which honours it only when the socket enabled IFLAGENEVEGROHINT gs-grohint. genevegrocomplete instead calls...

EUVD-2026-59307

In the Linux kernel, the following vulnerability has been resolved: geneve: gate GRO hint in genevegrocomplete on gs-grohint genevegroreceive reads the GRO hint through geneveskgrohintoff, which honours it only when the socket enabled IFLAGENEVEGROHINT gs-grohint. genevegrocomplete instead calls...

CVE-2026-72408

In the Linux kernel, the following vulnerability has been resolved: geneve: gate GRO hint in genevegrocomplete on gs-grohint genevegroreceive reads the GRO hint through geneveskgrohintoff, which honours it only when the socket enabled IFLAGENEVEGROHINT gs-grohint. genevegrocomplete instead calls...

CVE-2026-72406 net: sungem: fix probe error cleanup

In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevice, including the DMA block, MMIO mapping, PCI regions, and the...

CVE-2026-72407 geneve: validate inner network offset in geneve_gro_complete()

In the Linux kernel, the following vulnerability has been resolved: geneve: validate inner network offset in genevegrocomplete Even with both paths gated on gs-grohint, genevegrocomplete re-derives the inner dispatch type and length from the packet and the current gs-grohint, independently of...

CVE-2026-72407

In the Linux kernel, the following vulnerability has been resolved: geneve: validate inner network offset in genevegrocomplete Even with both paths gated on gs-grohint, genevegrocomplete re-derives the inner dispatch type and length from the packet and the current gs-grohint, independently of...