Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-72057

net/sched: act_ct: preserve tc_skb_cb across defragmentation

CVSS 8.2 HighEPSS 0.0059 · 48th percentile

Published by the CVE Program (CNA: Linux) at 15 Aug 2026, 05:52 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 0d76daf2013ce1da20eab5e26bd81d983e1c18fb to before fb080b6f54835d5d4d11ce3122800e6f0f6689e6 git
  • affected ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before 67d6b00a54446c008f52cf70fc0c2ad0c712f85d git
  • affected ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before 2400c4b05d58834b994500a9eec90a37db44187c git
  • affected ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before 5c3ae5f6c7c6de73ea9b6a75154fe4ed343e1bac git
  • affected ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before b3d835407846134b0d54637c0281b39bebef831d git
  • affected ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before f7f45ceb855d9ba1cba594fb3f383255f7013fad git
  • affected ec624fe740b416fb68d536b37fb8eef46f90b5c2 to before 9092e15defbe6c7bc241c306093ca9d358a578e7 git
  • affected 5.15.13 to before 5.15.217 semver
Other versions: unaffected
Linux Linux
  • affected 5.16
  • unaffected before 5.16 semver
  • unaffected 5.15.217 to 5.15.*, inclusive semver
  • unaffected 6.1.184 to 6.1.*, inclusive semver
  • unaffected 6.6.145 to 6.6.*, inclusive semver
  • unaffected 6.12.97 to 6.12.*, inclusive semver
  • unaffected 6.18.40 to 6.18.*, inclusive semver
  • unaffected 7.1.5 to 7.1.*, inclusive semver
  • unaffected 7.2 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-72057
CNA
Linux
Weakness (CWE)
CWE-662
Tags
Published
15 Aug 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
8.2 High 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0059, the 48th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 15 Aug 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.