THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-68136 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 ("net-gro: Fix GRO flush when receiving a GSO packet.") added a flush check to skb_gro_receive(), but skb_gro_receive_list() lacks the s

[NVD] CVE-2026-68136 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 ("net-gro: Fix GRO flush when receiving a GSO packet.") added a flush check to skb_gro_receive(), but skb_gro_receive_list() lacks the s

mednvdPublished 2026-08-10

CVE-2026-68136 CVSS: 9.8 CRITICAL Published: 2026-08-10T13:19:59.120

In the Linux kernel, the following vulnerability has been resolved:

net: gro: fix double aggregation of flush-marked skbs

Commit 0ab03f353d36 ("net-gro: Fix GRO flush when receiving a GSO packet.") added a flush check to skb_gro_receive(), but skb_gro_receive_list() lacks the same validation.

As a result, packets marked with

Indicators of compromise

CVE-2026-68136cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-68136