CVE-2026-72041CWE-664

CVE-2026-72041

Critical · published August 15, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
54.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

espintcp: use sk_msg_free_partial to fix partial send

sk_msg_free_partial() ensures consistency of the skmsg at every

iteration, without having to manually handle uncharges and offsets.

This simplifies the code, and fixes some bugs in skmsg accounting when

we don't send the full contents.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00755 · 54.6th percentile
Weakness
CWE-664 · Improper Control of a Resource Through its Lifetime
Published
2026-08-15T10:21Z
References (8)
https://git.kernel.org/stable/c/007800408002d871f5699bdb944f985896730b8f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/14c0b42c8a2cd9b5361bbff45b52f69c62c6a286 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4ea8c051b4bd7feec7749a980f2f70e1782b84d7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/518dcb84b997dff461800b079e5f2596389f766a · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/54d73f18f8919735f4d04d6f43374f75756c0180 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a338ce41bc933d8f74c39d9b3b6f1d8ca53d9714 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a66d45e0ce6d73cd79962d422388e61bfaf0cb50 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a977f78adce40b39d90d9567e7987bb110102810 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:52Z
    espintcp: use sk_msg_free_partial to fix partial send
    cvelistv5