Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2026-72045: Ubuntu Linux kernels could let virtual device read others' memory
CVE-2026-72045 · published 2 months ago
Summary
A flaw in certain Ubuntu kernel packages allows a virtual network function to access memory areas belonging to other functions, potentially exposing or altering data. The issue is fixed by adding a check that ensures the request stays within its own assigned range. Apply the latest kernel updates for your Ubuntu systems to protect against this risk.
What to do
- Update debian linux to version 6.12.101-1.
- Update debian linux to version 7.1.5-1.
- Update debian linux-6.12 to version 6.12.101-1~deb12u1.
- Update linux kernel to version 7.1.5.
- Update debian linux to version 6.1.187-1.
- Update bellsoft linux-lts to version 6.1.189-r0.
- Update bellsoft linux-lts to version 6.12.103-r0.
- Update bellsoft linux-lts to version 6.18.43-r0.
- Update canonical linux-nvidia-tegra to version 6.8.0-1036.39.
- Update canonical linux to version 7.0.0-38.38.
- Update canonical linux-aws to version 7.0.0-1014.14.
- Update canonical linux-azure to version 7.0.0-1017.17.
- Update canonical linux-azure-fde to version 7.0.0-1016.16.
- Update canonical linux-gcp to version 7.0.0-1014.14.
- Update canonical linux-gke to version 7.0.0-1008.9.
- Update canonical linux-ibm to version 7.0.0-1015.15.
- Update canonical linux-oem-7.0 to version 7.0.0-1015.15.
- Update canonical linux-oracle to version 7.0.0-1013.13.
- Update canonical linux-realtime to version 7.0.0-38.38.1.
- Update canonical linux-aws-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-azure-7.0 to version 7.0.0-1017.17~24.04.1.
- Update canonical linux-azure-fde-7.0 to version 7.0.0-1016.16~24.04.1.
- Update canonical linux-gcp-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-hwe-7.0 to version 7.0.0-38.38~24.04.4.
- Update canonical linux-oracle-7.0 to version 7.0.0-1013.13~24.04.1.
- Update canonical linux to version 6.8.0-147.147.
- Update canonical linux-aws to version 6.8.0-1067.70.
- Update canonical linux-azure to version 6.8.0-1071.79.
- Update canonical linux-azure-fde to version 6.8.0-1069.76.
- Update canonical linux-gcp to version 6.8.0-1071.79.
- Update canonical linux-gke to version 6.8.0-1066.74.
- Update canonical linux-gkeop to version 6.8.0-1052.56.
- Update canonical linux-ibm to version 6.8.0-1067.68.
- Update canonical linux-lowlatency to version 6.8.0-147.147.1.
- Update canonical linux-oracle to version 6.8.0-1064.67.
- Update canonical linux-riscv-7.0 to version 7.0.0-38.38.1~24.04.1.
- Update canonical linux-bluefield to version 6.8.0-1033.38.
- Update canonical linux-realtime to version 6.8.1-1062.63.
- Update canonical linux-aws-fips to version 6.8.0-1067.70+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1071.79+fips1.
- Update canonical linux-fips to version 6.8.0-147.147+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1071.79+fips1.
- Update canonical linux-riscv to version 7.0.0-38.38.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
Showing 50 of 192. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg | All versions |
| Ubuntu:22.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1017.17~24.04.1 Fix: upgrade to 7.0.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 |
< 7.0.0-1016.16~24.04.1 Fix: upgrade to 7.0.0-1016.16~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-38.38~24.04.4 Fix: upgrade to 7.0.0-38.38~24.04.4
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1013.13~24.04.1 Fix: upgrade to 7.0.0-1013.13~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-38.38.1~24.04.1 Fix: upgrade to 7.0.0-38.38.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1015.15 Fix: upgrade to 7.0.0-1015.15
|
| – | linux | linux |
< e9c5b03208507dd6d58b0c23a2c60b5c2f4c1b11 5.14 < 04c014e49b9f53d58a8f94adece8a0af3ae1b85c |
| Debian:12 | debian | linux |
< 6.1.187-1 Fix: upgrade to 6.1.187-1
|
| Debian:13 | debian | linux |
< 6.12.101-1 Fix: upgrade to 6.12.101-1
|
| Debian:14 | debian | linux |
< 7.1.5-1 Fix: upgrade to 7.1.5-1
|
| Debian:12 | debian | linux-6.12 |
< 6.12.101-1~deb12u1 Fix: upgrade to 6.12.101-1~deb12u1
|
| Linux | linux | kernel |
>= 6.19.0, < 7.1.5 Fix: upgrade to 7.1.5
|
| Alpaquita:23 | bellsoft | linux-lts |
>= 6.1.182-r0, < 6.1.189-r0 Fix: upgrade to 6.1.189-r0
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.95-r0, < 6.12.103-r0 Fix: upgrade to 6.12.103-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.18.38-r0, < 6.18.43-r0 Fix: upgrade to 6.18.43-r0
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1036.39 Fix: upgrade to 6.8.0-1036.39
|
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-38.38 Fix: upgrade to 7.0.0-38.38
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1017.17 Fix: upgrade to 7.0.0-1017.17
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1016.16 Fix: upgrade to 7.0.0-1016.16
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1008.9 Fix: upgrade to 7.0.0-1008.9
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1015.15 Fix: upgrade to 7.0.0-1015.15
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-38.38.1 Fix: upgrade to 7.0.0-38.38.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-147.147 Fix: upgrade to 6.8.0-147.147
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1067.70 Fix: upgrade to 6.8.0-1067.70
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1071.79 Fix: upgrade to 6.8.0-1071.79
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1069.76 Fix: upgrade to 6.8.0-1069.76
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1071.79 Fix: upgrade to 6.8.0-1071.79
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1066.74 Fix: upgrade to 6.8.0-1066.74
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1052.56 Fix: upgrade to 6.8.0-1052.56
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1067.68 Fix: upgrade to 6.8.0-1067.68
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-147.147.1 Fix: upgrade to 6.8.0-147.147.1
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1064.67 Fix: upgrade to 6.8.0-1064.67
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1033.38 Fix: upgrade to 6.8.0-1033.38
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1062.63 Fix: upgrade to 6.8.1-1062.63
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1067.70+fips1 Fix: upgrade to 6.8.0-1067.70+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1071.79+fips1 Fix: upgrade to 6.8.0-1071.79+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-147.147+fips1 Fix: upgrade to 6.8.0-147.147+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1071.79+fips1 Fix: upgrade to 6.8.0-1071.79+fips1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-38.38.1 Fix: upgrade to 7.0.0-38.38.1
|
Original advisory text
octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvu_mbox_handler_lmtst_tbl_setup() uses req->base_pcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it into the caller's own LMT map table entry. The mailbox dispatcher authenticates req->hdr.pcifunc from the IRQ source, but req->base_pcifunc is a separate payload field and is not sanitized. Reject the request with -EPERM when a VF caller's base_pcifunc is not a valid function under its own PF. is_pf_func_valid() bounds the FUNC field to the PF's configured VF count, keeping the computed index inside the caller's own slot block.
References
- https://ubuntu.com/security/notices/USN-8887-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8886-1 Vendor Advisory
- https://git.kernel.org/stable/c/54535692bec9ef464adc714108eb19e49e38b5a2 Third Party Advisory
- https://git.kernel.org/stable/c/59da37fee81a8d76079313348ca13c5bc90dd6ae Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-72045 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-72045 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-72045 Third Party Advisory
- https://git.kernel.org/stable/c/04c014e49b9f53d58a8f94adece8a0af3ae1b85c URL
- https://git.kernel.org/stable/c/6967dd944be2a71eddab3a2ae1a1a4dd9e5f8eed URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72045... Vendor Advisory
- https://git.kernel.org/linus/8cdcf3d2caacdee7ddd363705fb4d93b0c1a0915 Third Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-72045 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/8cdcf3d2caacdee7ddd363705fb4d93b0c1a0915 Third Party Advisory
- https://git.kernel.org/stable/c/c73b8795b45f4ad5a95120d2e9b435ea4616e08e Third Party Advisory
- https://git.kernel.org/stable/c/e9c5b03208507dd6d58b0c23a2c60b5c2f4c1b11 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8888-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8889-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8888-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8887-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8887-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8917-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8918-1 Vendor Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-72045 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-862Missing Authorization
Timeline
Published15 Aug 2026
Updated28 Oct 2026
First seen15 Aug 2026
Sources
DEBIAN-CVE-2026-72045 · OSV
CVE-2026-72045 · NVD
CVE-2026-72045 · MITRE
UBUNTU-CVE-2026-72045 · OSV
CVE-2026-72045 · OSV
BELL-CVE-2026-72045 · OSV
Track software like this
Free during beta