Skip to main content
CVE-2026-45940VulnerabilityPublished Updated

Microsoft · net: stmmac: fix oops when split header is enabled

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-45940· Medium

Not known to be exploited · fixed in babab1b42ed68877ef669a08384becf281ad2582 : update Microsoft when convenient.

Data as of 29 Oct 2026, 19:04 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in babab1b42ed68877ef669a08384becf281ad2582, b1f23df09e7dbf4c86b6908dff7efb8cb2b7d609, 107e169f963920b11fa3c1bb384c077fe7330696 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 27 May 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ ec222003bd948de8f3ffbca522d328af1a8452ad, < babab1b42ed68877ef669a08384becf281ad2582
Fixed in
  • babab1b42ed68877ef669a08384becf281ad2582
LinuxLinuxAffected
  • ≥ ec222003bd948de8f3ffbca522d328af1a8452ad, < b1f23df09e7dbf4c86b6908dff7efb8cb2b7d609
Fixed in
  • b1f23df09e7dbf4c86b6908dff7efb8cb2b7d609
LinuxLinuxAffected
  • ≥ ec222003bd948de8f3ffbca522d328af1a8452ad, < 107e169f963920b11fa3c1bb384c077fe7330696
Fixed in
  • 107e169f963920b11fa3c1bb384c077fe7330696
LinuxLinuxAffected
  • ≥ ec222003bd948de8f3ffbca522d328af1a8452ad, < 92b45c99311ac4f3857cccee47059c4fb067fd4d
Fixed in
  • 92b45c99311ac4f3857cccee47059c4fb067fd4d
LinuxLinuxAffected
  • ≥ ec222003bd948de8f3ffbca522d328af1a8452ad, < 36f81cb7d82e9614a7058da6abdf2e3a03993df1
Fixed in
  • 36f81cb7d82e9614a7058da6abdf2e3a03993df1
LinuxLinuxAffected
  • =5.4
Fixed in–

AI-suggested

If you cannot patch yet, avoid enabling the split header feature if possible.

Description

CVE-2026-45940 is a vulnerability in Microsoft software related to the 'net: stmmac' component that causes a system crash (oops) when the split header feature is enabled. The issue is identified in version 3.0 of the affected product. No CVSS score or detailed technical impact is provided.

References

Community reviews

Loading reviews…