Description
In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported by the NIC Validate the packet length reported in the RX CQE before passing it to skb processing. The CQE is supplied by the NIC device and should not be blindly trusted.
References7
- git.kernel.org/stable/c/282c5214ca4eb3799158c76782646e86d2945d1b
- git.kernel.org/stable/c/2e276b14b6d378372bf0152df89286cbe7632fb0
- git.kernel.org/stable/c/2e2a83b4998af4384e677d3b2ac08565274279bf
- git.kernel.org/stable/c/6080189291d958604dcefe513a13900835ac982f
- git.kernel.org/stable/c/6d13eaa13341a8f80aaf86f78591e1b1d393711d
- git.kernel.org/stable/c/a631f82f89c76084ad5b2b9c043d3b391ffa56d8
- git.kernel.org/stable/c/d2568e64d01f480200063fadd67d6938f676c66f
Metrics
- CVSS 3.1
-
9.8
CRITICAL
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 1% percentile: 55 · as of 11 November 2026
- CWE
- CWE-20
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.