CVE-2026-72450

Received Received - Intake

Linux Kernel XFRM Selector Validation Flaw

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen during match syzbot reported a shift-out-of-bounds in xfrm_selector_match() due to AF_UNSPEC selector with large prefixlen (e.g. 128) matched against IPv4 flow (when XFRM_STATE_AF_UNSPEC is set). Fix this by: - Rejecting mismatched families in xfrm_selector_match. - Returning false in addr4_match if prefixlen > 32. - Returning false in addr_match if prefixlen > 128 (prevents overflow).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72450

EUVD

EUVD-2026-59349

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a shift-out-of-bounds issue in the Linux kernel's xfrm_selector_match function. It occurs when an AF_UNSPEC selector with a large prefix length (e.g., 128) is matched against an IPv4 flow. The kernel fails to validate the selector family and prefix length properly, leading to an out-of-bounds memory access.

Detection Guidance

This vulnerability involves a shift-out-of-bounds in the Linux kernel's xfrm_selector_match function. Detection requires checking for kernel logs or crashes related to XFRM state mismatches. Monitor system logs for kernel oops or warnings about invalid prefix lengths in xfrm operations.

Impact Analysis

This vulnerability could allow an attacker to cause a denial-of-service condition by triggering a kernel panic or memory corruption. It may also enable unauthorized access or data leaks if exploited in systems using IPsec (xfrm) for secure communications.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel issue related to memory safety in the xfrm subsystem. No evidence suggests it impacts data protection or privacy requirements.

Mitigation Strategies

Apply the latest Linux kernel patches to address the xfrm_selector_match issue. Ensure kernel version includes the fix for rejecting mismatched families and validating prefix lengths. Restart services or systems if required after patching.

Hi! I’m here to help you understand CVE-2026-72450. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70