SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-72041

CRITICAL · CVSS 9.8 EPSS 0.69%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the espintcp module, where improper handling of partial sends can lead to inconsistencies in socket message accounting. This issue could potentially result in resource leaks or unexpected behavior during message transmission. System administrators and developers using affected Linux distributions should prioritize applying updates to mitigate any risks associated with this vulnerability.

CVE
CVE-2026-72041
Severity
CRITICAL
CVSS
9.8
EPSS
0.69%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: espintcp: use sk_msg_free_partial to fix partial send sk_msg_free_partial() ensures consistency of the skmsg at every iteration, without having to manually handle uncharges and offsets. This simplifies the code, and fixes some bugs in skmsg accounting when we don't send the full contents.