Skip to main content

Linux Kernel CVE-2026-73261

MEDIUM
2026-08-14 vendor:ubuntu
Information Disclosure
Share

Severity by source

vuln.today AI
7.5 HIGH

Network-reachable TCP option parsing requires no authentication or interaction; impact conservatively assessed as availability-only pending confirmation of memory corruption scope.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Lifecycle Timeline

2
Analysis Generated
Aug 14, 2026 - 22:39 vuln.today
CVE Published
Aug 14, 2026 - 00:00 cve.org
MEDIUM

DescriptionCVE.org

[Built-in TCP/IP malformed TCP option handling]

AnalysisAI

Malformed TCP option handling in the Linux kernel's built-in TCP/IP stack may allow remote attackers to trigger undefined behavior when processing crafted TCP packets with invalid or unexpected option fields. Reported by Ubuntu vendor channels, this affects the in-kernel network stack used by all Ubuntu Linux distributions. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Send crafted TCP SYN with malformed options
Exploit
Kernel parses invalid TCP option fields
Execution
Trigger memory corruption or crash in TCP stack
Impact
Kernel panic (DoS) or execute arbitrary code in kernel context
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No special application-level configuration is required - TCP/IP option parsing occurs at the kernel level for any open TCP port. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Risk assessment is significantly constrained by missing data. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An unauthenticated remote attacker sends a stream of crafted TCP packets containing malformed or oversized TCP option fields to any open TCP port on the target system. The kernel's TCP option parser processes the malformed data, triggering a crash, memory corruption, or unintended execution path. …
Remediation No vendor-released patch has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-73261 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy