{
  "cveId": "CVE-2026-72393",
  "url": "https://patchblox.com/security/cve/CVE-2026-72393",
  "summary": "CVE-2026-72393 is fixed in linux on 1 platform by DEBIAN-CVE-2026-72393 (version 7.1.5-1), released August 15, 2026. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  eth: fbnic: don\u0027t cache shinfo across skb reallo...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  eth: fbnic: don\u0027t cache shinfo across skb realloc  fbnic_tx_lso() calls skb_cow_head() which may reallocate the skb including the shared info. We can\u0027t use the pointer calculated before the call.      BUG: KASAN: slab-use-after-free in fbnic_tx_lso.isra.0\u002B0x668/0x8e0     Read of size 4 at addr ff110000262edd98 by task swapper/5/0     Call Trace:      fbnic_tx_lso.isra.0\u002B0x668/0x8e0      fbnic_xmit_frame\u002B0x622/0xba0      dev_hard_start_xmit\u002B0xf4/0x620      Allocated by task 8653:      __alloc_skb\u002B0x11e/0x5f0      alloc_skb_with_frags\u002B0xcc/0x6c0      sock_alloc_send_pskb\u002B0x327/0x3f0      __ip_append_data\u002B0x188b/0x47a0      ip_make_skb\u002B0x24a/0x300      udp_sendmsg\u002B0x14d2/0x21e0      Freed by task 0:      kfree\u002B0x123/0x5a0      pskb_expand_head\u002B0x36c/0xfa0      fbnic_tx_lso.isra.0\u002B0x500/0x8e0      fbnic_xmit_frame\u002B0x622/0xba0      dev_hard_start_xmit\u002B0xf4/0x620      sch_direct_xmit\u002B0x25b/0x1100      The buggy address belongs to the object at ff110000262edc40      which belongs to the cache skbuff_small_head of size 640     The buggy address is located 344 bytes inside of      freed 640-byte region [ff110000262edc40, ff110000262ede",
  "published": "2026-08-15T06:22:12Z",
  "severity": "critical",
  "cvss": 9.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00631,
  "epssPercentile": 0.50533,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.1.5-1",
      "fix": "DEBIAN-CVE-2026-72393",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-72393",
      "released": "2026-08-15T22:38:55Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}