Riskcovery

CVE-2026-52932

xfrm: ipcomp: Free destination pages on acomp errors

State
Published
Severity
7.5 High
Published
Jun 24, 2026
Updated
Aug 5, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

xfrm: ipcomp: Free destination pages on acomp errors

Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • eb2953d26971f3083bbf95de4bc997b5bedf0b6e to before dc6dcba80d72a27ab61831ad3d253316e0c9b9d5Affected
  • eb2953d26971f3083bbf95de4bc997b5bedf0b6e to before b30aa173c3809f6af4c83a86099be1be19aa48ebAffected
  • eb2953d26971f3083bbf95de4bc997b5bedf0b6e to before 7dbac7680eb629b3b4dc7e98c34f943b8814c0c8Affected
LinuxLinux
  • 6.15Affected
  • before 6.15Not affected
  • 6.18.35 through 6.18.*Not affected
  • 7.0.12 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.