CVE-2026-72296
In the Linux kernel, the following vulnerability has been resolved:
net: ife: require ETHHLEN to be pullable in ifedecode()
ife decode may return after making only the outer IFE header and
metadata pullable. The caller then passes the decapsulated packet to
ethtypetrans(), which expects the inner Ethernet header to be
accessible from the linear data area.
With a malformed IFE frame, the inner Ethernet header may still be
shorter than ETH_HLEN in the linear area, which can lead to a crash in
the original code.
Fix this by extending the pull check in ife_decode() so that the inner
Ethernet header is also guaranteed to be pullable before returning.
Package Versions Affected
Automatically patch vulnerabilities without upgrading
CVSS Version



Related Resources
References
https://git.kernel.org/stable/c/1cb42ec10294a55380e52e674b3df2b962648242, https://git.kernel.org/stable/c/5526d1997aea6c9bd865ca4d4894b52e799d735c, https://git.kernel.org/stable/c/70013f9163bef7fbd9fa62f81cf91b2a7ba66163, https://git.kernel.org/stable/c/8c8818e52fddb247ff3214622401a4de6ff8482e, https://git.kernel.org/stable/c/9406f6012b7343661efb516a11c62d4db2b62f75, https://git.kernel.org/stable/c/9433578bff9c100c466a6354574892e55293cb8f, https://git.kernel.org/stable/c/b69ad768cd4a2ef4e07c18492ae85438ed17c7cb, https://git.kernel.org/stable/c/be272e159dfe1207b67332ad6e17adcf59b4ea4b, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72296.json, https://nvd.nist.gov/vuln/detail/CVE-2026-72296, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git