Get real-time updates on Telegram
CVE-2026-72136: Linux 4.19
CVE-2026-72136. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00169 (percentile 0.05777), scored 15-Oct-2026.
Affected technology
Linux · f203b76d78092faf248db3f851840fbecf80b40e to before 04c1aa57d08471b1953bf27c84ac9b3d78d71831, f203b76d78092faf248db3f851840fbecf80b40e to before bdfd1c21d90e628a58a9de79e024cdfcbedfa15c, f203b76d78092faf248db3f851840fbecf80b40e to before 80ec68bba11f7f387c0e4099c2d7b2c84943eb99, f203b76d78092faf248db3f851840fbecf80b40e to before e9c90756f10da334fb31552e52c61f1dba69f491, f203b76d78092faf248db3f851840fbecf80b40e to before 37b61946d278c7deb0d40ba8f2b6fc0478d61dab, f203b76d78092faf248db3f851840fbecf80b40e to before 8ca2a19a987a7d1cb4c916ed9723a1c6993b4276, f203b76d78092faf248db3f851840fbecf80b40e to before 3ba2b2ef7d6a63b190f15cfc2b4ba0fba59928ea, f203b76d78092faf248db3f851840fbecf80b40e to before 095515d89b19b6cc19dfcdc846f97403ed1ebce3
Linux
Linux · 4.19
Linux
Component: Not specified by the source
File: net/xfrm/xfrm_interface_core.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.2 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00169 · percentile 0.05777 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 19:24:35.956875+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-72136.html