CVE-2026-72041
What it is
In the Linux kernel, the following vulnerability has been resolved: espintcp: use sk_msg_free_partial to fix partial send sk_msg_free_partial() ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in skmsg accounting when we don't send the full contents.
At a glance
- Exploitability
- Can be exploited over the network without logging in. High risk of data exposure, data tampering, service disruption.
- Exploit odds
- 0.7% chance of exploitation in the next 30 days (EPSS).
- Fix
- No patch or advisory is linked yet. Look at mitigations or restrict exposure.
Timeline
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Details
- Published
- Last modified
- Exploit probability
- 0.7% · EPSS, next 30 days
- Weakness
- CWE-664
- Record status
- Received
Attack profile CVSS 3.1 · 9.8
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- https://git.kernel.org/stable/c/007800408002d871f5699bdb944f985896730b8f
- https://git.kernel.org/stable/c/14c0b42c8a2cd9b5361bbff45b52f69c62c6a286
- https://git.kernel.org/stable/c/4ea8c051b4bd7feec7749a980f2f70e1782b84d7
- https://git.kernel.org/stable/c/518dcb84b997dff461800b079e5f2596389f766a
- https://git.kernel.org/stable/c/54d73f18f8919735f4d04d6f43374f75756c0180
- https://git.kernel.org/stable/c/a338ce41bc933d8f74c39d9b3b6f1d8ca53d9714
- https://git.kernel.org/stable/c/a66d45e0ce6d73cd79962d422388e61bfaf0cb50
- https://git.kernel.org/stable/c/a977f78adce40b39d90d9567e7987bb110102810