Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-52932

Опубликовано: 24 июн. 2026
Источник: redhat
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.

A flaw was found in the Linux kernel's xfrm IPcomp (IP Payload Compression Protocol) component. This vulnerability involves improper memory deallocation during error handling, where allocated resources are not correctly freed. This could allow a local attacker to cause resource exhaustion, potentially leading to a Denial of Service (DoS) on the system.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtNot affected

Показывать по

Дополнительная информация

Дефект:
CWE-772
https://bugzilla.redhat.com/show_bug.cgi?id=2492087kernel: xfrm: ipcomp: Free destination pages on acomp errors

EPSS

Процентиль: 26%
0.00335
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.

CVSS3: 7.5
nvd
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.

CVSS3: 7.5
debian
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: x ...

CVSS3: 7.5
github
около 1 месяца назад

In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.

EPSS

Процентиль: 26%
0.00335
Низкий