CVE-2026-72393

A flaw was found in the Linux kernel's fbnic Ethernet driver. When the fbnic_tx_lso() function reallocates a socket buffer (skb), it fails to update a cached pointer to shared information. This can lead to a use-after-free vulnerability, where the driver attempts to access memory that has already been released. This could result in a system crash, leading to a Denial of Service (DoS).

This vulnerability is evaluated as having a Moderate severity because exploitation is confined to systems equipped with specific Meta fbnic network adapters and primarily leads to a kernel crash without arbitrary code execution. Red Hat Enterprise Linux releases are not affected by this flaw as the fbnic network driver is not present in supported enterprise kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.