Critical severity · published Aug 15, 2026
CVE-2026-72041
espintcp: use sk_msg_free_partial to fix partial send
9.8
CVSS
0.7%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
espintcp: use sk_msg_free_partial to fix partial send
sk_msg_free_partial() ensures consistency of the skmsg at every
iteration, without having to manually handle uncharges and offsets.
This simplifies the code, and fixes some bugs in skmsg accounting when
we don't send the full contents.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 518dcb84b997dff461800b079e5f2596389f766a; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 4ea8c051b4bd7feec7749a980f2f70e1782b84d7; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before a977f78adce40b39d90d9567e7987bb110102810; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 54d73f18f8919735f4d04d6f43374f75756c0180; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before 14c0b42c8a2cd9b5361bbff45b52f69c62c6a286; e27cca96cd68fa2c6814c90f9a1cfd36bb68c593 before a66d45e0ce6d73cd79962d422388e61bfaf0cb50; +3 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-72041
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-72041
git.kernel.org
https://git.kernel.org/stable/c/007800408002d871f5699bdb944f985896730b8f
git.kernel.org
https://git.kernel.org/stable/c/14c0b42c8a2cd9b5361bbff45b52f69c62c6a286
git.kernel.org
https://git.kernel.org/stable/c/4ea8c051b4bd7feec7749a980f2f70e1782b84d7
git.kernel.org
https://git.kernel.org/stable/c/518dcb84b997dff461800b079e5f2596389f766a
git.kernel.org
https://git.kernel.org/stable/c/54d73f18f8919735f4d04d6f43374f75756c0180
git.kernel.org
https://git.kernel.org/stable/c/a338ce41bc933d8f74c39d9b3b6f1d8ca53d9714
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
7.8
CVE-2025-38352
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()