What is the CVSS score of EUVD-2026-59615?

EUVD-2026-59615 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by EUVD-2026-59615?

Linux kernel vulnerability CVE-2026-74550 enables unauthenticated remote attackers to trigger packet storms on network routing systems, causing network availability outages across organizations'…. A patch is available.

How to fix or mitigate EUVD-2026-59615?

Within 24 hours, identify and inventory all Linux systems acting as network forwarders (routers, gateways, edge devices, VPC forwarding) and verify which run kernel versions 2.6.39 through the vulnerable range specified in vendor advisories. Within 7 days, apply the vendor-released kernel patch from your distribution provider (RHEL, Ubuntu, Debian, etc.) to all affected production systems, starting with internet-facing and critical network infrastructure; test patches in staging first. Within 30 days, complete patch deployment across all systems and confirm via vulnerability scan that no systems remain on vulnerable kernel versions.

Linux Kernel EUVD-2026-59615

| CVE-2026-74550 HIGH

2026-08-15 Linux

GHSA-9cch-cjjm-3m2c

Information Disclosure Linux Red Hat Suse

7.5

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

7.5 HIGH

Network-reachable with no authentication; availability-only impact from ICMP flood; IP forwarding requirement is common enough on routing infrastructure to keep AC:L.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

5.9 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.5 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 12:22 vuln.today

CVSS changed

Aug 17, 2026 - 06:22 NVD

7.5 (HIGH)

Patch available

Aug 15, 2026 - 13:04 EUVD

CVE Published

Aug 15, 2026 - 12:27 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 15, 2026 - 12:27 cve.org

HIGH 7.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

net: do not send ICMP/NDISC Redirects when peer allocation fails

When inet_getpeer_v4() or inet_getpeer_v6() fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending un-rate-limited ICMP/NDISC Redirect messages.

In IPv4, ip_rt_send_redirect() called icmp_send() directly when peer NULL. In IPv6, ip6_forward() and ndisc_send_redirect() passed a NULL peer into inet_peer_xrlim_allow(), which returned true when peer NULL.

Because ICMP/NDISC Redirects are not part of the default global rate limit mask (sysctl_icmp_ratemask), sending redirects when peer == NULL creates an un-rate-limited ICMP packet storm.

Fix this by failing closed in ip_rt_send_redirect(), ip6_forward(), and ndisc_send_redirect() when peer is NULL.

AnalysisAI

Un-rate-limited ICMP and NDISC Redirect packet storms are possible in the Linux kernel when peer entry allocation fails inside inet_getpeer_v4() or inet_getpeer_v6(), affecting all kernels from 2.6.39 through the fixed stable releases. A remote unauthenticated attacker who can trigger peer table exhaustion against a Linux system acting as a network forwarder can cause the kernel to emit unbounded ICMP/NDISC Redirect messages, producing severe network availability degradation. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Identify Linux router with IP forwarding enabled

Delivery

Exhaust inet_peer table via multi-source flood

Exploit

Force peer == NULL return in redirect handler

Execution

Redirect path bypasses rate limiting

Persist

Kernel emits unbounded ICMP/NDISC flood

Impact

Router links and CPU exhausted

Access

Identify Linux router with IP forwarding enabled

Delivery

Exhaust inet_peer table via multi-source flood

Exploit

Force peer == NULL return in redirect handler

Execution

Redirect path bypasses rate limiting

Persist

Kernel emits unbounded ICMP/NDISC flood

Impact

Router links and CPU exhausted

Vulnerability AssessmentAI

Exploitation	Exploitation requires the target Linux system to be configured as a network forwarder with IP forwarding explicitly enabled: net.ipv4.ip_forward=1 for the IPv4 path (ip_rt_send_redirect) or net.ipv6.conf.all.forwarding=1 for the IPv6/NDP paths (ip6_forward, ndisc_send_redirect). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 7.5 score (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) accurately reflects a remotely reachable, unauthenticated availability threat, but real-world exposure is substantially gated by the requirement that the target must be operating as a network forwarder with IP forwarding explicitly enabled - a non-default configuration on most Linux endpoint systems. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker sends a sustained flood of packets sourced from many distinct IP addresses through a Linux router, filling the inet_peer tree and triggering allocation failures that return NULL peers. Once peer allocation is exhausted, any subsequent forwarded packet eligible for an ICMP or NDISC Redirect causes the kernel to emit a redirect with no rate limiting applied, generating a self-amplifying packet storm that saturates the router's outbound links and exhausts interrupt-driven CPU capacity. …
Remediation	The primary fix is to upgrade to a patched Linux kernel version: 6.6.151, 6.12.103, 6.18.44, 7.1.8, or 7.2-rc6 depending on the stable branch in use. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify and inventory all Linux systems acting as network forwarders (routers, gateways, edge devices, VPC forwarding) and verify which run kernel versions 2.6.39 through the vulnerable range specified in vendor advisories. …

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise Desktop 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

EUVD-2026-59615 vulnerability details – vuln.today

Back

Linux Kernel EUVD-2026-59615

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Unlock full vulnerability intelligence

Attack ChainAIDerived

Vulnerability AssessmentAI

Recommended ActionAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code