CVE-2026-64056

FAUCET Score

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in gmac_rx() is static local, but the Gemini has two ethernet ports, meaning there can be races between the ports on a bad day if a device is using both. Make the RX SKB a per-port variable and carry it over between invocations in the port struct instead. Zero the pointer once we call napi_gro_frags(), on error (after calling napi_free_frags()) or if the port is stopped. Zero it in some place where not strictly necessary just to emphasize what is going on. This was found by Sashiko during normal patch review.

First published: Jul 19, 2026Last modified: Jul 20, 2026

Impacted Technologies

Vendor	Product	Version(s)	CPE
Linux	Linux	4.16CNA affecteddefault affected
Linux	Linux	>= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, < 06937db21ee311ed07eba47954447245041a982d, >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, < 27856d533eca3804008695f61c1e4d5ff984196b, >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, < 3b249988d774dacf13b203817e971934a42243c4, >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, < 67a35e7da7ef9d2f000aa758552a128324c604a0, >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, < 6bba24e9ebe6f1c0b356cd471e36bdc7fa434897, >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, < 72158ea185b27afae163949b0e86164cb6b64e55, >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, < b6b22824b30e48ce1df3a2e80990f4b8505deb50, >= 4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88, < cfd62907f3cdbc3b6da8f49ba907c0390018fe5eCNA affecteddefault unaffected

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

5.9

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.55%

Probability of exploitation in next 30 days

EPSS Percentile

42.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0055 is in the 22nd percentile among its peer group of 36,897 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.