What is the CVSS score of CVE-2026-72410?

CVE-2026-72410 has a contested CVSS base score of 7.8 from a third party (e.g. CISA-ADP), while the vendor rates it High. vuln.today uses the vendor rating as authoritative.

Which versions of Linux Kernel are affected by CVE-2026-72410?

A kernel-level privilege escalation vulnerability in the OcteonTX2 driver affects organizations operating Marvell OcteonTX2-based networking and security infrastructure.. A patch is available.

How to fix or mitigate CVE-2026-72410?

Within 24 hours, inventory all systems running the Linux kernel with the OcteonTX2-AF driver loaded, particularly those on Marvell OcteonTX2 SoC hardware used in network appliances or security infrastructure. Within 7 days, prioritize patching systems with critical workloads and begin coordination with your Linux distribution or hardware vendor for patch availability and testing requirements. Within 30 days, apply the vendor-released kernel patch to all identified affected systems, verifying driver functionality post-update and conducting targeted testing on network packet processing or hardware acceleration workflows that depend on the OcteonTX2 driver.

Linux Kernel CVE-2026-72410

EUVD-2026-59309 HIGH

2026-08-15 Linux

GHSA-8v6p-qx2g-g6v4

Information Disclosure Linux Red Hat Suse

High

Disputed · 7.8 Vendor: Linux

Severity by source

Sources disagree (Low–High)

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local devlink interface requires CAP_NET_ADMIN (PR:L); hardware-specific driver flaw with potential full kernel-level impact justifies C:H/I:H/A:H within unchanged scope.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

3.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

Red Hat

5.5 LOW

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 09:10 vuln.today

CVSS changed

Aug 17, 2026 - 06:22 NVD

7.8 (HIGH)

Patch available

Aug 15, 2026 - 07:20 EUVD

CVE Published

Aug 15, 2026 - 05:56 cve.org

HIGH 7.8

CVE Published

Aug 15, 2026 - 05:56 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Validate NIX maximum LFs correctly

NIX maximum number of LFs can be set via devlink command but that can be done before assigning any LFs to a PF/VF. The condition used to check whether any LFs are assigned is incorrect. This patch fixes that condition.

AnalysisAI

Incorrect bounds validation in the Linux kernel's octeontx2-af driver allows a local attacker with low privileges to trigger a kernel-level flaw by issuing a crafted devlink command that sets NIX maximum LFs before any PF/VF assignment, bypassing the faulty assignment-check condition. Systems running Marvell OcteonTX2 SoC hardware with the octeontx2-af driver loaded are affected across multiple stable kernel branches originating from commit dd7842878633453e38d6a4927593dd28b9d8ab91. EPSS exploitation probability is very low at 0.21% (11th percentile), no public exploit code has been identified, and this vulnerability is not listed in the CISA KEV catalog.

Technical ContextAI

The octeontx2-af kernel driver manages the Marvell OcteonTX2 Application Function (AF) component of OcteonTX2 SoC-based network controllers. The NIX (Network Interface X) block within this architecture allocates Local Functions (LFs) that are assigned to PF (Physical Function) or VF (Virtual Function) entities via the kernel's devlink interface. The vulnerability stems from an incorrect conditional check intended to verify whether any LFs have already been assigned before allowing the maximum LF count to be modified via devlink. This guard condition is logically flawed, meaning the kernel does not properly enforce the assignment state, potentially permitting configuration of LF counts that create inconsistent or out-of-bounds kernel data structures. No CWE has been formally assigned, but the root cause class is consistent with improper input validation (CWE-20) or incorrect comparison logic. Affected CPE: cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:* across branches introduced at commit dd7842878633453e38d6a4927593dd28b9d8ab91.

RemediationAI

Upgrade to a patched Linux kernel stable release: 6.12.97 or later on the 6.12.x branch (commit 0933fe0130eb71af0c3ab481b40f543b458a8c54, see https://git.kernel.org/stable/c/0933fe0130eb71af0c3ab481b40f543b458a8c54), 6.18.40 or later on the 6.18.x branch (https://git.kernel.org/stable/c/e0ac054416bf4e913fe96cefefe94e3331bbe6fa), 7.1.5 or later (https://git.kernel.org/stable/c/b1f6381acf9d55fab208e8b4c252a5a671820bd9), or 7.2-rc1 and beyond (https://git.kernel.org/stable/c/1576d12a39860418d6a68b402fda71a48f04a57c). As a compensating control where patching is not immediately possible, restricting access to the devlink interface by removing CAP_NET_ADMIN from unprivileged processes or enforcing strict namespace isolation (using user namespaces with reduced capabilities) will limit the attack surface, though this may impact legitimate network management workflows. Blacklisting the octeontx2-af module on systems where OcteonTX2 hardware is not actively used is another option but will disable associated NIC functionality.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

CVE-2026-72410 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-72410

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code