IPComp Destination Page Leak in Linux Kernel

Publication date: 2026-06-24

Last updated on: 2026-07-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp errors Move the out_free_req label up by a couple of lines so that the allocated dst SG list gets freed on error as well as success.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-08

Generated

2026-07-14

AI Q&A

2026-06-24

EPSS Evaluated

2026-07-13

NVD

CVE-2026-52932

EUVD

EUVD-2026-38702

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.19 (inc) to 7.0.12 (exc)
linux	linux_kernel	From 6.15 (inc) to 6.18.35 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is related to the Linux kernel's xfrm subsystem, specifically the ipcomp component. It involves improper handling of allocated destination pages during acomp errors. The fix moves the out_free_req label so that the allocated destination scatter-gather (SG) list is freed correctly on both error and success conditions, preventing potential resource leaks.

Impact Analysis

If unpatched, this vulnerability could lead to resource leaks in the Linux kernel when acomp errors occur in the ipcomp processing. This might cause increased memory usage or instability in the system due to unreleased memory pages.

Hi! I’m here to help you understand CVE-2026-52932. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70