01 Record

CVE-2026-64056

net: ethernet: cortina: Make RX SKB per-port

CriticalPUBLISHEDCNA: Linux

CNA base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

net: ethernet: cortina: Make RX SKB per-port

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.55% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 45.8% of scored records. A rank, not a probability.
NVD base score: 9.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-09-02.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-19 15:39Z3 MO AGO

Last updated

2026-08-05 12:38Z2 MO AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-820Missing SynchronizationBase

Data version

5.2

Document digest

2daf48f60016eb68e52005978a9fdd5358ee129c36c6ce691a05833c463d0758

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to < 27856d533eca3804008695f61c1e4d5ff984196b, 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to < b6b22824b30e48ce1df3a2e80990f4b8505deb50, 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to < 6bba24e9ebe6f1c0b356cd471e36bdc7fa434897, 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to < 3b249988d774dacf13b203817e971934a42243c4, 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to < 72158ea185b27afae163949b0e86164cb6b64e55, 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to < cfd62907f3cdbc3b6da8f49ba907c0390018fe5e, 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to < 67a35e7da7ef9d2f000aa758552a128324c604a0, 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88 to < 06937db21ee311ed07eba47954447245041a982d, 4.16—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/27856d533eca3804008695f61c1e4d5ff984196b
git.kernel.orghttps://git.kernel.org/stable/c/b6b22824b30e48ce1df3a2e80990f4b8505deb50
git.kernel.orghttps://git.kernel.org/stable/c/6bba24e9ebe6f1c0b356cd471e36bdc7fa434897
git.kernel.orghttps://git.kernel.org/stable/c/3b249988d774dacf13b203817e971934a42243c4
git.kernel.orghttps://git.kernel.org/stable/c/72158ea185b27afae163949b0e86164cb6b64e55
git.kernel.orghttps://git.kernel.org/stable/c/cfd62907f3cdbc3b6da8f49ba907c0390018fe5e
git.kernel.orghttps://git.kernel.org/stable/c/67a35e7da7ef9d2f000aa758552a128324c604a0
git.kernel.orghttps://git.kernel.org/stable/c/06937db21ee311ed07eba47954447245041a982d

07 Fixed in

Debian 12

linux
Fixed in 6.1.176-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.94-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.0.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.