🔴 严重 | CVE-2026-52993 — In the Linux kernel, the following vulnerability has be
🔴 《严重安全漏洞：CVE-2026-52993》
CVSS 评分: 严重（9.8） CVE ID: CVE-2026-52993
漏洞描述
In the Linux kernel, the following vulnerability has been resolved:
tipc: fix double-free in tipc_buf_append()
tipc_msg_validate() can potentially reallocate the skb it is validating,
freeing the old one. In tipc_buf_append(), it was being called with a
pointer to a local variable which was a copy of the caller's skb
pointer.
If the skb was reallocated and validation subsequently failed, the error
handling path would free the original skb pointer, which had already
been freed, leading to double-free.
Fix this by checking if head now points to a newly allocated reassembled
skb. If it does, reassign *headbuf for later freeing operations.
| 字段 | 值 |
|---|---|
| CVE ID | CVE-2026-52993 |
| CVSS 评分 | 9.8 |
| 严重程度 | 严重 |
| 发布时间 | 2026-06-24 |
| 状态 | Received |
数据来源: NVD | 获取时间: 2026-06-28 18:14
💬 评论