GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-72122 (GCVE-0-2026-72122)

Vulnerability from cvelistv5 – Published: 2026-08-15 05:53 – Updated: 2026-08-17 05:40
VLAI
Title
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
Summary
In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure bcm_sendmsg() reads bo->ifindex and checks bo->bound before taking lock_sock(), while bcm_notify(), bcm_connect() and bcm_release() all mutate both fields under that same lock. Because the lockless reads and the locked writes are unordered with respect to each other, a racing bcm_notify() (device unregister) or bcm_connect() (concurrent bind on another thread sharing the socket) can make bcm_sendmsg() observe an inconsistent combination, e.g. a stale bound=1 together with the now-cleared ifindex=0, silently turning a socket bound to a specific CAN interface into one that also matches "any" interface. Keep the lockless bo->bound check purely as a fast-path reject, and move the ifindex read (and a bo->bound re-check) into the locked section, where every writer already serializes. This removes the possibility of observing the two fields torn against each other, rather than trying to fix it with more READ_ONCE()/WRITE_ONCE() pairs on two independently updated fields. Annotate the now-purely-lockless bo->bound accesses consistently across all its write sites. Also fix bcm_rx_setup() silently returning success when the target device disappears concurrently instead of reporting -ENODEV, so a broken RX op is no longer left registered as if it had succeeded.
Severity
7.3 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: ffd980f976e7fd666c2e61bf8ab35107efd11828 , < 9e60c586faeaed80d55ab8ce2a4b8e56133bc395 (git)
Affected: ffd980f976e7fd666c2e61bf8ab35107efd11828 , < ffa80a2af27c97453861a5128e537214a31cd18a (git)
Affected: ffd980f976e7fd666c2e61bf8ab35107efd11828 , < 6bcc5cd247c2934373bc2a1cdf8bf12321169543 (git)
Affected: ffd980f976e7fd666c2e61bf8ab35107efd11828 , < 0f6f9f95294b4cbb26ba02209e893e3bd91237c3 (git)
Affected: ffd980f976e7fd666c2e61bf8ab35107efd11828 , < b70f1a15533afeeec5d07f20bec3f3867ab1c7b6 (git)
Affected: ffd980f976e7fd666c2e61bf8ab35107efd11828 , < 35f0ac19efb1a3f6c5e12c00e475a9ec2d9c3a6d (git)
Affected: ffd980f976e7fd666c2e61bf8ab35107efd11828 , < b9c6ac6fb4e01b34575816066e5d3890a57b3c86 (git)
Affected: ffd980f976e7fd666c2e61bf8ab35107efd11828 , < d9b091d9d22fee81ec53fb55d2032951993ceadb (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.25
Unaffected: 0 , < 2.6.25 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.97 , ≤ 6.12.* (semver)
Unaffected: 6.18.40 , ≤ 6.18.* (semver)
Unaffected: 7.1.5 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/can/bcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "9e60c586faeaed80d55ab8ce2a4b8e56133bc395",
              "status": "affected",
              "version": "ffd980f976e7fd666c2e61bf8ab35107efd11828",
              "versionType": "git"
            },
            {
              "lessThan": "ffa80a2af27c97453861a5128e537214a31cd18a",
              "status": "affected",
              "version": "ffd980f976e7fd666c2e61bf8ab35107efd11828",
              "versionType": "git"
            },
            {
              "lessThan": "6bcc5cd247c2934373bc2a1cdf8bf12321169543",
              "status": "affected",
              "version": "ffd980f976e7fd666c2e61bf8ab35107efd11828",
              "versionType": "git"
            },
            {
              "lessThan": "0f6f9f95294b4cbb26ba02209e893e3bd91237c3",
              "status": "affected",
              "version": "ffd980f976e7fd666c2e61bf8ab35107efd11828",
              "versionType": "git"
            },
            {
              "lessThan": "b70f1a15533afeeec5d07f20bec3f3867ab1c7b6",
              "status": "affected",
              "version": "ffd980f976e7fd666c2e61bf8ab35107efd11828",
              "versionType": "git"
            },
            {
              "lessThan": "35f0ac19efb1a3f6c5e12c00e475a9ec2d9c3a6d",
              "status": "affected",
              "version": "ffd980f976e7fd666c2e61bf8ab35107efd11828",
              "versionType": "git"
            },
            {
              "lessThan": "b9c6ac6fb4e01b34575816066e5d3890a57b3c86",
              "status": "affected",
              "version": "ffd980f976e7fd666c2e61bf8ab35107efd11828",
              "versionType": "git"
            },
            {
              "lessThan": "d9b091d9d22fee81ec53fb55d2032951993ceadb",
              "status": "affected",
              "version": "ffd980f976e7fd666c2e61bf8ab35107efd11828",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/can/bcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.25"
            },
            {
              "lessThan": "2.6.25",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.97",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.40",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.97",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.40",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.5",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "2.6.25",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure\n\nbcm_sendmsg() reads bo-\u003eifindex and checks bo-\u003ebound before taking\nlock_sock(), while bcm_notify(), bcm_connect() and bcm_release() all\nmutate both fields under that same lock. Because the lockless reads\nand the locked writes are unordered with respect to each other, a\nracing bcm_notify() (device unregister) or bcm_connect() (concurrent\nbind on another thread sharing the socket) can make bcm_sendmsg()\nobserve an inconsistent combination, e.g. a stale bound=1 together\nwith the now-cleared ifindex=0, silently turning a socket bound to a\nspecific CAN interface into one that also matches \"any\" interface.\n\nKeep the lockless bo-\u003ebound check purely as a fast-path reject, and\nmove the ifindex read (and a bo-\u003ebound re-check) into the locked\nsection, where every writer already serializes. This removes the\npossibility of observing the two fields torn against each other,\nrather than trying to fix it with more READ_ONCE()/WRITE_ONCE() pairs\non two independently updated fields. Annotate the now-purely-lockless\nbo-\u003ebound accesses consistently across all its write sites.\n\nAlso fix bcm_rx_setup() silently returning success when the target\ndevice disappears concurrently instead of reporting -ENODEV, so a\nbroken RX op is no longer left registered as if it had succeeded."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires local access to a PF_CAN SOCK_DGRAM CAN_BCM socket via sendmsg()/connect() syscalls; the race is in kernel socket state handling, not in remote packet reception or the physical CAN bus itself.\nAC:L - The attacker controls both sides of the race by concurrently calling sendmsg() on one thread while triggering bcm_connect() or NETDEV_UNREGISTER (e.g. ip link del) on another, making the torn bound/ifindex observation reliably triggerable.\nPR:L - No real-root capability is required beyond opening BCM sockets and binding to a CAN interface; unprivileged users with CAN access or CAP_NET_ADMIN via user namespaces can create vcan devices and drive the unregister/connect race.\nUI:N - Exploitation is fully attacker-driven through concurrent syscalls and does not require any victim user action such as mounting filesystems or opening files.\nS:U - The impact is unauthorized access to additional CAN interfaces within the same kernel security domain, not a cross-boundary escape such as VM breakout, sandbox escape, or IOMMU bypass.\nC:H - Racing to observe bound=1 with ifindex=0 causes RX_SETUP to register can_rx_register() on all CAN devices, letting a socket bound to one interface sniff traffic from every other CAN bus on the system including safety-critical vehicle or industrial networks.\nI:H - The same torn state enables TX_SETUP/TX_SEND on arbitrary interfaces via msg_name when per-socket binding would normally block it, allowing injection of attacker-controlled CAN frames onto buses the process was not authorized to transmit on.\nA:L - The concurrent bcm_rx_setup() bug can silently return success without registering a filter when the target device vanishes, degrading CAN monitoring reliability without causing kernel panic, oops, or deadlock."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T05:40:35.588Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/9e60c586faeaed80d55ab8ce2a4b8e56133bc395"
        },
        {
          "url": "https://git.kernel.org/stable/c/ffa80a2af27c97453861a5128e537214a31cd18a"
        },
        {
          "url": "https://git.kernel.org/stable/c/6bcc5cd247c2934373bc2a1cdf8bf12321169543"
        },
        {
          "url": "https://git.kernel.org/stable/c/0f6f9f95294b4cbb26ba02209e893e3bd91237c3"
        },
        {
          "url": "https://git.kernel.org/stable/c/b70f1a15533afeeec5d07f20bec3f3867ab1c7b6"
        },
        {
          "url": "https://git.kernel.org/stable/c/35f0ac19efb1a3f6c5e12c00e475a9ec2d9c3a6d"
        },
        {
          "url": "https://git.kernel.org/stable/c/b9c6ac6fb4e01b34575816066e5d3890a57b3c86"
        },
        {
          "url": "https://git.kernel.org/stable/c/d9b091d9d22fee81ec53fb55d2032951993ceadb"
        }
      ],
      "title": "can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-72122",
    "datePublished": "2026-08-15T05:53:00.704Z",
    "dateReserved": "2026-08-09T03:40:39.907Z",
    "dateUpdated": "2026-08-17T05:40:35.588Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-72122",
      "date": "2026-09-11",
      "epss": "0.00164",
      "percentile": "0.05928"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-72122\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-15T06:21:29.437\",\"lastModified\":\"2026-08-17T06:18:11.670\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\ncan: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure\\n\\nbcm_sendmsg() reads bo-\u003eifindex and checks bo-\u003ebound before taking\\nlock_sock(), while bcm_notify(), bcm_connect() and bcm_release() all\\nmutate both fields under that same lock. Because the lockless reads\\nand the locked writes are unordered with respect to each other, a\\nracing bcm_notify() (device unregister) or bcm_connect() (concurrent\\nbind on another thread sharing the socket) can make bcm_sendmsg()\\nobserve an inconsistent combination, e.g. a stale bound=1 together\\nwith the now-cleared ifindex=0, silently turning a socket bound to a\\nspecific CAN interface into one that also matches \\\"any\\\" interface.\\n\\nKeep the lockless bo-\u003ebound check purely as a fast-path reject, and\\nmove the ifindex read (and a bo-\u003ebound re-check) into the locked\\nsection, where every writer already serializes. This removes the\\npossibility of observing the two fields torn against each other,\\nrather than trying to fix it with more READ_ONCE()/WRITE_ONCE() pairs\\non two independently updated fields. Annotate the now-purely-lockless\\nbo-\u003ebound accesses consistently across all its write sites.\\n\\nAlso fix bcm_rx_setup() silently returning success when the target\\ndevice disappears concurrently instead of reporting -ENODEV, so a\\nbroken RX op is no longer left registered as if it had succeeded.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/can/bcm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"ffd980f976e7fd666c2e61bf8ab35107efd11828\",\"lessThan\":\"9e60c586faeaed80d55ab8ce2a4b8e56133bc395\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ffd980f976e7fd666c2e61bf8ab35107efd11828\",\"lessThan\":\"ffa80a2af27c97453861a5128e537214a31cd18a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ffd980f976e7fd666c2e61bf8ab35107efd11828\",\"lessThan\":\"6bcc5cd247c2934373bc2a1cdf8bf12321169543\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ffd980f976e7fd666c2e61bf8ab35107efd11828\",\"lessThan\":\"0f6f9f95294b4cbb26ba02209e893e3bd91237c3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ffd980f976e7fd666c2e61bf8ab35107efd11828\",\"lessThan\":\"b70f1a15533afeeec5d07f20bec3f3867ab1c7b6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ffd980f976e7fd666c2e61bf8ab35107efd11828\",\"lessThan\":\"35f0ac19efb1a3f6c5e12c00e475a9ec2d9c3a6d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ffd980f976e7fd666c2e61bf8ab35107efd11828\",\"lessThan\":\"b9c6ac6fb4e01b34575816066e5d3890a57b3c86\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ffd980f976e7fd666c2e61bf8ab35107efd11828\",\"lessThan\":\"d9b091d9d22fee81ec53fb55d2032951993ceadb\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/can/bcm.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.25\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.25\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.261\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.212\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.178\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.145\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.97\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.40\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.5\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L\",\"baseScore\":7.3,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.8,\"impactScore\":5.5}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0f6f9f95294b4cbb26ba02209e893e3bd91237c3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/35f0ac19efb1a3f6c5e12c00e475a9ec2d9c3a6d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6bcc5cd247c2934373bc2a1cdf8bf12321169543\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9e60c586faeaed80d55ab8ce2a4b8e56133bc395\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/b70f1a15533afeeec5d07f20bec3f3867ab1c7b6\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/b9c6ac6fb4e01b34575816066e5d3890a57b3c86\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/d9b091d9d22fee81ec53fb55d2032951993ceadb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ffa80a2af27c97453861a5128e537214a31cd18a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-17T22:58:04+00:00",
      "cve": "CVE-2026-72122",
      "id": "CVE-2026-72122",
      "initial_release_date": "2026-08-15T00:00:00+00:00",
      "product_status:known_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-72122.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-08-31T13:30:46Z",
      "cve": "CVE-2026-72122",
      "id": "CVE-2026-72122",
      "initial_release_date": "2026-08-31T13:30:46Z",
      "product_status:known_affected": "269",
      "product_status:known_not_affected": "93",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-72122",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-72122.json",
      "version": "2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.