CVE-2026-9054

CriticalCVSS 9.2

Published: 22/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

An attacker sending TCP, IL, RUDP, or GRE packets with a length less than the header size can trigger a kernel panic.

This vulnerability can cause a system crash (kernel panic), leading to service disruption and potential data loss.

Apply Linux kernel patches that address this issue.

Original NVD description (English source)

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.