CVE-2026-72297 | Linux Kernel up to 7.1.4 ATM QoS Validation /proc/net/atm/pvc check_tp traffic_class out-of-bounds

A vulnerability has been found in Linux Kernel up to 7.1.4 and classified as critical. This issue affects the function check_tp of the file /proc/net/atm/pvc of the component ATM QoS Validation. The manipulation of the argument traffic_class leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-72297. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.