Search/CVE-2026-64056
● CVE — Critical

CVE-2026-64056

VendorlinuxProductlinux kernelDiscoveredJul 19, 2026UpdatedSep 2, 2026

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in gmac_rx() is static local, but the Gemini has two ethernet ports, meaning there can be races between the ports on a bad day if a device is using both. Make the RX SKB a per-port variable and carry it over between invocations in the port struct instead. Zero the pointer once we call napi_gro_frags(), on error (after calling napi_free_frags()) or if the port is stopped. Zero it in some place where not strictly necessary just to emphasize what is going on. This was found by Sashiko during normal patch review.

CVSS v3.1
9.8 CRITICAL
EPSS
0.55%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
31
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Sep 25, 2026 → Sep 27, 2026
▼ 0.20pp
0.76% → 0.55% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Connections
32 relationships
Timeline
disclosure → media coverage
Jul 19, 2026
Disclosure — published as a CVE record. · last revised by NVD Sep 2, 2026
Jul 21, 2026
ubuntu.com reports: USN-8575-1: Linux kernel vulnerabilities
Jul 21, 2026
ubuntu.com reports: USN-8576-1: Linux kernel (NVIDIA Tegra) vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8593-1: Linux kernel vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8575-2: Linux kernel vulnerabilities
Jul 23, 2026
ubuntu.com reports: USN-8576-2: Linux kernel (NVIDIA Tegra) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8603-1: Linux kernel (Azure) vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8575-3: Linux kernel vulnerabilities
Jul 24, 2026
ubuntu.com reports: USN-8610-1: Linux kernel (Azure CVM) vulnerabilities
Jul 28, 2026
ubuntu.com reports: USN-8618-1: Linux kernel vulnerabilities
Jul 28, 2026
ubuntu.com reports: USN-8620-1: Linux kernel vulnerabilities
Jul 29, 2026
ubuntu.com reports: USN-8620-2: Linux kernel (Azure FIPS) vulnerabilities
Jul 31, 2026
ubuntu.com reports: USN-8620-3: Linux kernel (Intel IoTG) vulnerabilities
Jul 31, 2026
ubuntu.com reports: USN-8620-4: Linux kernel (Intel IoTG) vulnerabilities
Aug 20, 2026
ubuntu.com reports: USN-8663-1: Linux kernel (NVIDIA) vulnerabilities
Aug 20, 2026
ubuntu.com reports: USN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
Aug 21, 2026
ubuntu.com reports: USN-8668-1: Linux kernel (GCP) vulnerabilities
Sep 7, 2026
ubuntu.com reports: USN-8728-1: Linux kernel (GCP) vulnerabilities
Sep 7, 2026
ubuntu.com reports: USN-8729-1: Linux kernel vulnerabilities
Sep 15, 2026
ubuntu.com reports: USN-8761-1: Linux kernel (Azure) vulnerabilities
Sep 18, 2026
ubuntu.com reports: USN-8729-2: Linux kernel (Raspberry Pi Real-time) vulnerabilities
Sep 18, 2026
ubuntu.com reports: USN-8761-2: Linux kernel (Azure FIPS) vulnerabilities
Sep 18, 2026
ubuntu.com reports: USN-8781-1: Linux kernel (NVIDIA Tegra) vulnerabilities
Sep 21, 2026
ubuntu.com reports: USN-8761-3: Linux kernel (Azure) vulnerabilities
Sep 21, 2026
ubuntu.com reports: USN-8729-3: Linux kernel vulnerabilities
Sep 21, 2026
ubuntu.com reports: USN-8668-2: Linux kernel (Raspberry Pi) vulnerabilities
Sep 22, 2026
ubuntu.com reports: USN-8729-4: Linux kernel (Low Latency) vulnerabilities
Sep 22, 2026
ubuntu.com reports: USN-8728-2: Linux kernel (Azure) vulnerabilities
Sep 22, 2026
ubuntu.com reports: USN-8802-1: Linux kernel (Oracle) vulnerabilities
Sep 25, 2026
ubuntu.com reports: USN-8729-5: Linux kernel (AWS FIPS) vulnerabilities
Sep 29, 2026
ubuntu.com reports: USN-8729-6: Linux kernel (AWS) vulnerabilities
Sep 29, 2026
ubuntu.com reports: USN-8728-3: Linux kernel (Oracle) vulnerabilities