CVE-2026-72057

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the net/sched component where the tcf ct handle fragments() function calls nf ct handle fragments() without saving and restoring the skb->cb control buffer. Because the defragmentation helper clears the IPCB/IP6CB, which aliases the tc skb cb/qdisc skb cb control buffer, fragmented traffic processed through act ct loses qdisc metadata such as pkt segs. This can trigger a WARN ON ONCE() in the qdisc pkt segs() function when panic on warn is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.