CVE-2026-52932

xfrm: ipcomp: Free destination pages on acomp errors

CVSS 7.5 HIGHEPSS 0.3%

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

24 Jun 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Linux · Linux

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://git.kernel.org/stable/c/7dbac7680eb629b3b4dc7e98c34f943b8814c0c8 https://git.kernel.org/stable/c/b30aa173c3809f6af4c83a86099be1be19aa48eb https://git.kernel.org/stable/c/dc6dcba80d72a27ab61831ad3d253316e0c9b9d5