What is the CVSS score of EUVD-2026-57048?

EUVD-2026-57048 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 16.0%.

Which versions of Linux Kernel are affected by EUVD-2026-57048?

A heap buffer overflow in the Linux kernel's txgbe driver (Wangxun 10GbE hardware) allows local attackers to escalate privileges to kernel-level compromise.. A patch is available.

How to fix or mitigate EUVD-2026-57048?

Within 24 hours, inventory systems running Linux with Wangxun txgbe 10GbE network hardware to establish patch scope and prioritize critical systems. Within 7 days, apply vendor-released patches available in Linux kernel versions 6.19, 7.1.6, and 7.2-rc5, beginning with production infrastructure and systems with elevated privilege exposure. Within 30 days, complete deployment across all affected infrastructure, validate kernel version compliance against these patched versions, and establish monitoring for exploitation indicators in system logs.

Linux Kernel EUVD-2026-57048

| CVE-2026-68440 HIGH

2026-08-12 Linux

GHSA-mr83-4qj4-pp44

Buffer Overflow Linux

7.8

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

7.8 HIGH

Local ethtool invocation requires CAP_NET_ADMIN (PR:L); heap overflow in kernel driver achieves full confidentiality, integrity, and availability compromise with no user interaction.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SUSE

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.5 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 14, 2026 - 01:55 vuln.today

CVSS changed

Aug 13, 2026 - 23:37 NVD

7.8 (HIGH)

Patch available

Aug 12, 2026 - 01:02 EUVD

CVE Published

Aug 12, 2026 - 00:07 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 12, 2026 - 00:07 cve.org

HIGH 7.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

net: txgbe: fix heap overflow when reading module EEPROM

txgbe_read_eeprom_hostif() always copies round_up(length, 4) bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore causes an out-of-bounds write. Copy only the remaining bytes on the final dword instead.

AnalysisAI

Heap overflow in the Linux kernel's txgbe network driver enables a local attacker to write beyond an allocated heap buffer during ethtool EEPROM reads, potentially escalating to full kernel compromise on systems with Wangxun txgbe 10GbE hardware. The flaw exists because txgbe_read_eeprom_hostif() always copies round_up(length, 4) bytes into a buffer ethtool allocates to exactly length bytes, causing a 1-3 byte out-of-bounds write whenever the requested length is not 4-byte aligned. Vendor patches are available in Linux 6.19 and stable releases 7.1.6 and 7.2-rc5; no public exploit code or active exploitation has been identified at time of analysis, though the 16% EPSS score is notably elevated for a kernel driver defect.

Technical ContextAI

The txgbe driver is the Linux kernel's in-tree driver for Wangxun Technology 10-Gigabit Ethernet NICs, residing in the net/ethernet subsystem. The vulnerable function txgbe_read_eeprom_hostif() services ethtool EEPROM dump requests by performing hardware reads in 4-byte (dword) aligned chunks. It uses round_up(length, 4) to determine how many bytes to copy back, but the caller - the ethtool subsystem - allocates its receive buffer with exactly the user-requested length. When length is not divisible by 4, the final dword copy writes 1, 2, or 3 bytes past the end of the heap allocation, constituting a heap-based out-of-bounds write. Although the NVD lists CWE as N/A, this matches CWE-787 (Out-of-bounds Write) and CWE-122 (Heap-based Buffer Overflow). The fix corrects the final dword copy to write only the remaining bytes rather than a full aligned word. Affected CPE: cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*.

RemediationAI

The definitive fix is upgrading to Linux kernel 6.19 or the patched stable releases 7.1.6 or 7.2-rc5, which correct txgbe_read_eeprom_hostif() to copy only the remaining bytes on the final dword rather than a full aligned word. Patch commits are available at https://git.kernel.org/stable/c/febcced6958158e7e90a55a8567b3f5c3639c0b9 and https://git.kernel.org/stable/c/6a905a71fd43ce8b45f05044b11491337f232c9d for backporting to older stable series. Where immediate kernel upgrade is not possible, removing the txgbe module (rmmod txgbe) eliminates the attack surface entirely but disables all Wangxun txgbe NICs on the host - alternative connectivity must exist before applying this workaround. Restricting CAP_NET_ADMIN to trusted processes and accounts reduces the pool of potential local attackers and limits ethtool access to privileged users only; this does not prevent exploitation by already-privileged users. Vendor advisory detail is available at https://nvd.nist.gov/vuln/detail/CVE-2026-68440.

Same technique Buffer Overflow

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2020-0796 CRITICAL POC

10.0

CVE-2019-11043 CRITICAL POC

9.8

CVE-2009-0927 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

EUVD-2026-57048 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-57048

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Buffer Overflow

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code