What is the CVSS score of EUVD-2026-45628?

EUVD-2026-45628 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux are affected by EUVD-2026-45628?

The Linux kernel Cortina Gemini Ethernet driver contains a receive buffer handling defect affecting ARM SoC platforms that could expose network packet data through stale buffer contents.. A patch is available.

How to fix or mitigate EUVD-2026-45628?

Within 24 hours, inventory all ARM SoC deployments (embedded systems, edge devices, network appliances) to identify systems running the Cortina Gemini gmac Ethernet driver via kernel module check (modinfo cortina_gemini or equivalent). Within 7 days, obtain and apply the vendor-released patch to all confirmed affected systems, prioritizing production network infrastructure. Within 30 days, complete deployment validation across all identified systems and confirm kernel version reflects patched build.

Linux EUVD-2026-45628

| CVE-2026-64055 CRITICAL

2026-07-19 Linux

GHSA-j6pg-f87q-4363

Information Disclosure Linux

9.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SUSE

CRITICAL

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 17:09 vuln.today

CVSS changed

Jul 20, 2026 - 15:22 NVD

9.8 (CRITICAL)

Patch available

Jul 19, 2026 - 17:03 EUVD

CVE Published

Jul 19, 2026 - 15:39 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 19, 2026 - 15:39 cve.org

CRITICAL 9.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Carry over frag counter

The gmac_rx() NAPI poll function assembles packets in an SKB from a ring buffer.

If the ring buffer gets completely emptied during a poll cycle, we exit gmac_rx(), but the packet is not yet completely assembled in the SKB, yet the fragment counter frag_nr is reset to zero on the next invocation.

Solve this by making the RX fragment counter a part of the port struct, and carry it over between invocations.

Reset the fragment counter only right after calling napi_gro_frags(), on error (after calling napi_free_frags()) or if stopping the port.

Reset it in some place where not strictly necessary just to emphasize what is going on.

This was found by Sashiko during normal patch review.

AnalysisAI

Malformed packet assembly in the Linux kernel's Cortina Gemini 'gmac' Ethernet driver (drivers/net/ethernet/cortina) occurs because the RX fragment counter (frag_nr) is reset to zero between NAPI poll invocations when the RX ring buffer empties mid-assembly, leaving a partially built SKB. The realistic impact is corrupted or partially-assembled receive buffers on affected ARM SoC platforms, tagged as Information Disclosure, potentially leaking stale buffer contents or destabilizing the receive path. No public exploit identified at time of analysis; EPSS is low (0.18%, 7th percentile) and the issue is not in CISA KEV, and the NVD-supplied CVSS 9.8 is almost certainly an automated over-score inconsistent with a driver-internal RX race.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Critical

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

EUVD-2026-45628 vulnerability details – vuln.today

Back

Linux EUVD-2026-45628

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code