CVE-2026-72065

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mana network driver where the system fails to validate the packet length reported in the RX CQE (Completion Queue Entry) before passing it to skb (socket buffer) processing. Because the CQE is supplied by the NIC device, it should not be blindly trusted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.