Vulnerabilities

In the Linux kernel, the following vulnerability has been resolved: can: dev: init_can_skb(): restore skb header initialization Commit 9f10374bb024…

In the Linux kernel, the following vulnerability has been resolved: can: dev: init_can_skb(): restore skb header initialization Commit 9f10374bb024 ("can: remove private CAN skb headroom infrastructure") removed the skb_reset_mac_header()/skb_reset_network_header()/ skb_reset_transport_header() calls from init_can_skb(). As a result, RX skbs from alloc_can_skb() and friends again carry mac_header = 0xFFFF. When such an skb reaches packet_rcv_spkt() (SOCK_PACKET), the push length calculation overflows and triggers skb_under_panic -> kernel BUG -> full machine panic. The same issue was origin

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Linux kernel

Product

Linux kernel

Fix

available

Exposure class

Operating system

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-99066 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 23
   CVE NVD 8d ago

   In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry With AF_XDP on…

   Fix available CVE-2026-99078 Cisco
2. 16
   CVE NVD 8d ago

   In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP…

   Fix available CVE-2026-99077 Linux kernel
3. 16
   CVE NVD 8d ago

   In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching Currently, when ICMPv6 Packet…

   Fix available CVE-2026-99076 Linux kernel
4. 16
   CVE NVD 8d ago

   In the Linux kernel, the following vulnerability has been resolved: rust_binder: reschedule node refcount update on thread exit When a thread exits…

   Fix available CVE-2026-99075 Linux kernel
5. 16
   CVE NVD 8d ago

   In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop group shrinks Commit 4ce5dc9316de ("inet…

   Fix available CVE-2026-99073 Linux kernel
6. 16
   CVE NVD 8d ago

   In the Linux kernel, the following vulnerability has been resolved: ipv4: stop route notification sizing when nexthop group shrinks Commit…

   Fix available CVE-2026-99072 Linux kernel
7. 16
   CVE NVD 8d ago

   In the Linux kernel, the following vulnerability has been resolved: Input: ati_remote2 - fix type confusion in device attribute handlers Previously…

   Fix available CVE-2026-99069 Linux kernel
8. 16
   CVE NVD 8d ago

   In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Commit…

   Fix available CVE-2026-99068 Linux kernel
9. 16
   CVE NVD 8d ago

   In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() When…

   Fix available CVE-2026-99067 Linux kernel
10. 16
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() With commit…

    Fix available CVE-2026-99065 Linux kernel
11. 16
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removing CIPSO cipso_v4_skbuff_delattr()…

    Fix available CVE-2026-99064 Linux kernel
12. 16
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in read_skb() After a partial stream…

    Fix available CVE-2026-99062 Linux kernel
13. 16
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P device removal race in brcmf_detach() When the driver is…

    Fix available CVE-2026-99061 Linux kernel
14. 16
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7603: initialize global station WCID mt7603 uses a driver-private…

    Fix available CVE-2026-99060 Linux kernel
15. 23
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consumption after intermediate initiation Two…

    Fix available CVE-2026-99059 Linux kernel
16. 16
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix NULL current_pwq deref in chained work check current_wq_worker()…

    Fix available CVE-2026-99058 Linux kernel
17. 16
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: strparser: make sure __strp_recv isn't running before tearing down the parser The…

    Fix available CVE-2026-99056 Linux kernel
18. 16
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: tipc: destroy topsrv workqueues before closing connections tipc_topsrv_stop()…

    Fix available CVE-2026-99054 Linux kernel
19. 23
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: tipc: hold a reference to nodes found by link name tipc_node_find_by_name()…

    Fix available CVE-2026-99053 Cisco
20. 16
    CVE NVD 8d ago

    In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts When an…

    Fix available CVE-2026-99052 Linux kernel