CVE-2026-52932
xfrm: ipcomp: Free destination pages on acomp errors
HIGH
7.5
CVSS Score
Published: June 24, 2026 at 07:14 AM UTC
Updated: August 5, 2026 at 01:24 PM UTC
1 product affected across 1 vendorLinux Kernel
Using Linux by Linux?
Get instant alerts when new vulnerabilities affect Linux - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.5
Exploit prediction
EPSS 0.6%
Description
In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
6.15 ≤ v < 6.18.356.15 ≤ v < 7.0.126.15 ≤ v < 7.16.19 ≤ v < 7.0.127.1 rc17.1 rc27.1 rc37.1 rc47.1 rc5eb2953d26971f3083bbf95de4bc997b5bedf0b6e
Vendor states this is fixed in 7dbac7680eb629b3b4dc7e98c34f943b8814c0c8 (fixed)
Vendor states this is fixed in b30aa173c3809f6af4c83a86099be1be19aa48eb (fixed)
Vendor states this is fixed in dc6dcba80d72a27ab61831ad3d253316e0c9b9d5 (fixed)
Vendor states this is fixed in 6.15 (unaffected)
Vendor states this is fixed in 6.18.35 (unaffected)
Vendor states this is fixed in 7.0.12 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (3)
CVSS
7.5HIGHLinux
Vector?
Quick Info
StatusANALYZED
CWE
NVD-CWE-noinfo
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card